Your review has been sent successfully

Cisco Updates

2092
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

Critical

High

Medium

Low

Warning Date

Severity Level

Warning Number

Target Sector

3 September, 2020

● High

2020-1720

All

Description:

Cisco has released security updates to address several vulnerabilities in the following products:

  • Cisco Firepower 4100 Series
  • Cisco Firepower 9300 Security Appliances
  • Cisco Jabber for Windows
  • Cisco Enterprise NFVIS
    • 3.5.1 - 4.1.2
  • Cisco Small Business Routers
  • Cisco AsyncOS software
    • ESA software releases 13.5.1-277 and earlier
    • SMA software releases 13.6.1-193 and earlier
    • WSA software releases 11.7.2-011 and earlier
  • Webex Meetings Client for Windows
    • releases 39.5.25 and 40.6.6
  • Webex Meetings Desktop App for Windows
    • releases 39.5.25 and 40.6.6
  • Webex Teams for Windows
    • releases earlier than Release 3.0.15711.0
  • Cisco Webex Training
    • releases earlier than Release 40.7.6
  • ASR 9000 Series Aggregation Services Routers (32-bit and 64-bit models)IOS XR, SW only
  • Network Convergence System 1000 Series
  • Network Convergence System 5000 Series
  • Network Convergence System 5500 Series

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Denial of service attack (DoS)
  • Elevate privileges
  • Execute arbitrary code
  • Sensitive information disclosure
  • Buffer overflow
  • Path traversal attack

Best practice and Recommendations:

The CERT team encourages users to review Cisco security advisory and apply the necessary updates:

Last updated at 3 September, 2020

Rate the content

rate-icon
up icon