Your review has been sent successfully

Cisco Updates

1984
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

11 May, 2020

● Medium

2020-1220

All

Description:

Cisco has released security updates to address multiple vulnerabilities in the following products :

  • Cisco FTD Software releases earlier than Release 6.5.0.
  • Cisco FTD Software releases earlier than Release 6.4.0.9 and Release 6.5.0.5.
  • Cisco FTD Software releases earlier than releases 6.2.3.15, 6.3.0.5, and 6.4.0.6.
  • Cisco FTD Software releases earlier than releases 6.2.3.15, 6.3.0.5, and 6.4.0.6.
  • Cisco Adaptive Security Appliance (ASA) Software releases earlier than releases 9.10.1.37, 9.12.3, and 9.13.1.2
  • Cisco Firepower Threat Defense (FTD) Software releases earlier than Release 6.6.0, if the software is running on a Cisco Firepower 2100 Series Security Appliance.
  • Cisco Firepower Management Center (FMC) releases earlier than Release 6.2.2.3.
  • Cisco FMC Software releases earlier than Release 6.5.0 if they had a Firepower User Agent Software release earlier than Release 2.5.0 enabled.
  • Cisco FMC Software releases earlier than Release 6.2.2.2.
  • Cisco FMC Software releases earlier than Release 6.3.0.
  • Cisco FDM On-Box software releases earlier than Release 6.2.3.
  • Cisco ASA Software or Cisco FTD Software.
  • Cisco Firepower 1000 Series appliances if they are running a vulnerable release of Cisco FTD Software and have a feature enabled.
  • Cisco FTD Software releases 6.2.3.12, 6.2.3.13, 6.2.3.14, and 6.2.3.15 if VPN System Logging is configured.
  • Cisco FTD Software releases 6.3.0 and 6.4.0.
  • Cisco Umbrella.
  • IMC Supervisor releases 1.1.0.0 and later, earlier than Release 2.2.1.3
  • UCS Director releases 5.4.0.0 and later, earlier than Release 6.7.4.0
  • UCS Director Express for Big Data releases 2.0.0.0 and later, earlier than Release 3.7.4.0
  • Cisco FTD Software releases 6.4.0 through 6.4.0.8 with an SSL/TLS policy with URL category configured.
  • Cisco SMA Software releases earlier than Release 13.6.
  • Cisco FTD Software releases earlier than Release 6.2.2.1.
  • Cisco HCM-F Software releases earlier than Release 12.5(1)SU2.

Threats:

  • Denial of service attack (DoS)
  • Cross-site request forgery (CSRF)
  • Execute arbitrary code

Best practice and Recommendations:

The CERT team encourages users to apply the necessary updates according to the link below:

Last updated at 11 May, 2020

Rate the content

rate-icon
up icon