تنبيه Cisco
2784تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
5 مايو, 2022
● عالي
2022-4780
الكل
أصدرت Cisco عدّة تحديثات لمعالجة عددٍ من الثغرات في المنتجات التالية:
- TelePresence CE Software
- RoomOS Software in Cloud-Aware On-Premises operation
- Secure Endpoint, formerly Advanced Malware Protection (AMP) for Endpoints - Linux
- Secure Endpoint, formerly AMP for Endpoints - MacOS
- Secure Endpoint, formerly AMP for Endpoints - Windows
- ClamAV scanning library
- 0.103.5 وما قبل
- 0.104.2 وما قبل
- Cisco Small Business RV Series Routers
- RV340 Dual WAN Gigabit VPN Routers
- RV340W Dual WAN Gigabit Wireless-AC VPN Routers
- RV345 Dual WAN Gigabit VPN Routers
- RV345P Dual WAN Gigabit POE VPN Routers
- Cisco SD-WAN vManage Software
- Cisco Enterprise NFVIS
يمكن للمهاجم عن بُعد استغلال الثغرات وتنفيذ ما يلي:
- هجمة حجب الخدمة (DoS attack)
- قراءة معلومات حساسة
- تنفيذ برمجيات خبيثة
يوصي المركز بتحديث المنتجات المتأثرة، حيث أصدرت Cisco توضيحًا لهذه التحديثات:
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ROS-DOS-X7H7XhkK
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-ZAZBwRVG
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-prVGcHLd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-html-XAuOK8mR
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbrv-rce-OYLQbL9u
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-rv-cmd-inj-8Pv9JMJD
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmge-infodc-WPSkAMhp
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9