Cisco Updates
3114Warning Date
Severity Level
Warning Number
Target Sector
3 September, 2020
● High
2020-1720
All
Description:
Cisco has released security updates to address several vulnerabilities in the following products:
- Cisco Firepower 4100 Series
- Cisco Firepower 9300 Security Appliances
- Cisco Jabber for Windows
- Cisco Enterprise NFVIS
- 3.5.1 - 4.1.2
- Cisco Small Business Routers
- Cisco AsyncOS software
- ESA software releases 13.5.1-277 and earlier
- SMA software releases 13.6.1-193 and earlier
- WSA software releases 11.7.2-011 and earlier
- Webex Meetings Client for Windows
- releases 39.5.25 and 40.6.6
- Webex Meetings Desktop App for Windows
- releases 39.5.25 and 40.6.6
- Webex Teams for Windows
- releases earlier than Release 3.0.15711.0
- Cisco Webex Training
- releases earlier than Release 40.7.6
- ASR 9000 Series Aggregation Services Routers (32-bit and 64-bit models)IOS XR, SW only
- Network Convergence System 1000 Series
- Network Convergence System 5000 Series
- Network Convergence System 5500 Series
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Elevate privileges
- Execute arbitrary code
- Sensitive information disclosure
- Buffer overflow
- Path traversal attack
Best practice and Recommendations:
The CERT team encourages users to review Cisco security advisory and apply the necessary updates:
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-info-disclosure-vMJMMgJ
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-tls-dos-xW53TBhb
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-buffer-cSdmfWUt
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-G3NSjPn7
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ttcgB9R3
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-path-emy79OC2
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-wsa-esa-info-dis-vsvPzOHP
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-media-znjfwHD6
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-meetings-UtbwOR4Q
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-cli-privescl-sDVEmhqv
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-vY8M4KGB
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-file-overwrite-UONzPMkr
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-UyTKCPGg