Skip to main content

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address three High and nine Medium severity vulnerabilities for Cisco Secure Network Analytics Manager, Secure Network Analytics Virtual Manager, Cisco EPNM, Cisco ISE, and other products

Threat ID:
CC-4295
Threat Severity:
Information only
Published:
6 April 2023 3:15 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Cisco has released security updates to address three High and nine Medium severity vulnerabilities for Cisco Secure Network Analytics Manager, Secure Network Analytics Virtual Manager, Cisco EPNM, Cisco ISE, and other products

The following platforms are also known to be affected:

  • Secure Network Analytics Manager
  • Secure Network Analytics Virtual Manager
  • Stealthwatch Management Console 2200
  • Cisco EPNM
  • Cisco Webex Meetings
  • Cisco Unified CCX
  • Cisco Secure Network Analytics
  • Cisco Duo Two-Factor Authentication for macOS
  • Cisco Duo Authentication for Windows Logon and RDP

Threat details

Introduction

Cisco has released security updates to address three High and nine Medium severity vulnerabilities for Cisco Secure Network Analytics Manager, Secure Network Analytics Virtual Manager, Cisco EPNM, Cisco ISE, and other products. The High vulnerabilities are related to command injection and remote code execution. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of a system.

Remediation advice

Affected organisations are encouraged to review the following Cisco Security Advisories for more information.

Remediation steps

Type Step
Patch

Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | cisco-sa-adeos-MLAyEcvk


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk
Patch

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities | cisco-sa-sb-rv32x-cmdinject-cKQsZpxL


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv32x-cmdinject-cKQsZpxL
Patch

Cisco Secure Network Analytics Remote Code Execution Vulnerability | cisco-sa-stealthsmc-rce-sfNBPjcS


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealthsmc-rce-sfNBPjcS
Patch

Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | cisco-sa-cisco-pdng-dos-KmzwEy2Q


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q
Patch

Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | cisco-sa-duo-replay-knuNKd


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd
Patch

Cisco Identity Services Engine Command Injection Vulnerabilities | cisco-sa-ise-injection-2XbOg9Dg


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-2XbOg9Dg
Patch

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities | cisco-sa-pi-epnm-eRPWAXLe


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe
Patch

Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities | cisco-sa-rv-stored-xss-vqz7gC8W


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W
Patch

Cisco Secure Network Analytics Remote Code Execution Vulnerability | cisco-sa-stealth-rce-BDwXFK9C


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealth-rce-BDwXFK9C
Patch

Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | cisco-sa-uccx-xss-GO9L9xxr


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-xss-GO9L9xxr
Patch

Cisco Webex Meetings Web UI Vulnerabilities | cisco-sa-wbx-sxss-fupl-64uHbcm5


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5
Patch

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD
Guidance

Cisco Meraki Local Status Page Configuration Hardening | cisco-sa-meraki-lsp-7xySn6pj


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-lsp-7xySn6pj

CVE Vulnerabilities

Status Published

CVE-2023-20128

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands as the root user on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates to address these vulnerabilities.
Status Published

CVE-2023-20122

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.
Status Published

CVE-2023-20117

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands as the root user on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates to address these vulnerabilities.
Status Published

CVE-2023-20102

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to insufficient sanitization of user-provided data that is parsed into system memory. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the administrator user.
Status Published

CVE-2023-20153
Status Published

CVE-2023-20152
Status Published

CVE-2023-20139
Status Published

CVE-2023-20138
Status Published

CVE-2023-20137
Status Published

CVE-2023-20134
Status Published

CVE-2023-20132
Status Published

CVE-2023-20130
Status Published

CVE-2023-20124
Status Published

CVE-2023-20129
Status Published

CVE-2023-20127
Status Published

CVE-2023-20123
Status Published

CVE-2023-20121
Status Published

CVE-2023-20103
Status Published

CVE-2023-20096
Status Published

CVE-2023-20051

Last edited: 6 April 2023 3:15 pm