تنبيه Cisco
3083تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
29 سبتمبر, 2022
● عالي
2022-5289
الكل
أصدرتCisco عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:
- Cisco Catalyst 9100 Series Access Points
- Cisco Wireless LAN Controller AireOS Software FIPS Mode
- Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing
- Cisco IOS and IOS XE Software SSH
- Cisco SD-WAN Software
- Cisco IOS XE Software for Catalyst Switches MPLS
- Cisco IOS and IOS XE Software Common Industrial Protocol Request
- Cisco IOS XE Software for Catalyst 9200 Series Switches
- Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points
- Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility
- Cisco Catalyst 9100 Series Access Points Association Request
Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway
يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:
- تنفيذ برمجيات خبيثة
- هجمة حجب الخدمة (DoS attack)
- رفع الصلاحيات لزيادة قدرته على التعديل في النظام
يوصي المركز بتحديث النسخ المتأثرة حيث أصدرت Cisco توضيحًا لهذه التحديثات:
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-udp-dos-XDyEwhNz
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-mKGRrsCB
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dhcp-dos-76pCjPxK
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssh-excpt-dos-FzOBQTnk
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-mpls-dos-Ab4OUL3
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cip-dos-9rTbKLt9
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-6vpe-dos-tJBtf5Zv
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cat-verify-D4NEQA6q
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewc-priv-esc-nderYLtK
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-mob-dos-342YAc6J
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alg-dos-KU9Z8kFX