Cisco Updates

Your review has been sent successfully

2759

Security Alert

● Critical

● High

● Medium

● Low

Warning Date

Severity Level

Warning Number

Target Sector

6 May, 2021

● High

2021-2884

All

Description:

Cisco has released security updates to address multiple vulnerabilities in the following products:

CiCisco SD-WAN vManage
Cisco HyperFlex HX
Cisco SD-WAN software:
- SD-WAN vBond Orchestrator Software
- SD-WAN vEdge Cloud Routers
- SD-WAN vEdge Routers
- SD-WAN vManage Software
- SD-WAN vSmart Controller Software
Cisco SD-WAN vEdge Software:
- SD-WAN vEdge Cloud Routers
- SD-WAN vEdge Routers
WAP125 Wireless-AC Dual Band Desktop Access Point with PoE
- 1.0.3.1 and earlier
WAP131 Wireless-N Dual Radio Access Point with PoE
- 1.0.2.17 and earlier
WAP150 Wireless-AC/N Dual Radio Access Point with PoE
- 1.1.2.4 and earlier
WAP351 Wireless-N Dual Radio Access Point with 5-Port Switch
- 1.0.2.17 and earlier
WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE
- 1.1.2.4 and earlier
WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN
- 1.0.3.1 and earlier
Cisco Enterprise NFV Infrastructure Software (NFVIS)
- releases earlier than 4.5.1
Cisco Unified Communications Manager IM & Presence Service
Cisco devices if they are running a vulnerable release of Cisco AnyConnect Secure Mobility Client for Windows

Threats:

Attacker could exploit these vulnerabilities by doing the following:

Best practice and Recommendations:

The CERT team encourages users to review Cisco security advisory and apply the necessary updates:

Last updated at 6 May, 2021