Your review has been sent successfully

Cisco Updates

2935
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

● Critical

● High

● Medium

● Low

Most Viewed Warnings

Dell EMC Alert

● Critical

F5 Alert

● High

IBM Alert

● Critical

Fortinet Alert

● High

Red Hat Alert

● High

حملات تصيدية تستهدف مايكروسوفت تيمز (Microsoft Teams)

● High

Warning Date

Severity Level

Warning Number

Target Sector

14 January, 2021

● Medium

2021-2327

All

Description:

Cisco has released security updates to address several vulnerabilities in the following products:

  • AnyConnect Secure Mobility Client for Linux releases earlier than Release 4.9.03047
  • AnyConnect Secure Mobility Client for MacOS releases earlier than Release 4.9.03047
  • AnyConnect Secure Mobility Client for Windows releases earlier than Release 4.9.03049
  • Cisco CMX releases 10.6.0, 10.6.1, and 10.6.2.
  • Unified Communications Manager (Unified CM)
  • Unified Communications Manager Session Management Edition (Unified CM SME)
  • Unified Communications Manager IM & Presence Service (Unified CM IM&P)
  • Unity Connection
  • Emergency Responder
  • Prime License Manager
  • Cisco FMC releases earlier than Release 6.7.0
  • Cisco FMC Software releases earlier than Release 6.6.1
  • Cisco Video Surveillance 8000 Series IP Cameras if they were running a firmware release earlier than Release 1.0.9-8 and they had Cisco Discovery Protocol enabled
  • Cisco Finesse releases earlier than Release 12.0 ES05 and Release 12.5 ES05
  • Cisco Enterprise NFVIS devices running releases earlier than Release 4.4.1
  • Cisco Proximity Desktop for Windows releases earlier than Release 3.1.0
  • Cisco Small Business routers
    • RV110W Wireless-N VPN Firewall
    • RV130 VPN Router
    • RV130W Wireless-N Multifunction VPN Router
    • RV215W Wireless-N VPN Router
  • 1000 Series Integrated Services Routers (ISRs)
  • 3000 Series Industrial Security Appliances (ISAs)
  • 4000 Series Integrated Services Routers (ISRs)
  • Cloud Services Router 1000V
  • Firepower Threat Defense (FTD) Software
  • Integrated Services Virtual Router (ISRv)
  • Meraki MX64
  • Meraki MX64W
  • Meraki MX67
  • Meraki MX67C
  • Meraki MX67W
  • Meraki MX68
  • Meraki MX68CW
  • Meraki MX68W
  • Meraki MX100
  • Meraki MX84
  • Meraki MX250
  • Meraki MX450
  • Cisco StarOS releases 21.19.7 and later
  • 3.0MR3 Security Patch 5 and earlier
  • 4.0MR3 Security Patch 4 and earlier
  • Cisco Webex Meetings sites prior to November 24, 2020
  • Cisco Webex Teams releases earlier than Release 40.12.0.17293
  • AnyConnect Secure Mobility Client for MacOS
  • AnyConnect Secure Mobility Client for Linux
  • AnyConnect Secure Mobility Client for mobile device operating systems such as iOS, Android, and Universal Windows Platform
  • Cisco CMX releases 10.6.0, 10.6.1, and 10.6.2.

Threats:

An attacker could exploit these vulnerabilities by doing the following:

  • Remote code execution
  • Privileges escalation
  • Denial of service attack (DoS)
  • Cross-site scripting (XSS)
  • Code injection

Best practice and Recommendations:

The CERT team encourages users to review Cisco security advisory and apply the necessary updates:

Last updated at 14 January, 2021

Rate the content

rate-icon
up icon