Cisco Alert
3014Warning Date
Severity Level
Warning Number
Target Sector
23 June, 2022
● Medium
2022-4997
All
Description:
Cisco has released security updates to address several vulnerabilities in the following products:
- Cisco ESA
- Cisco Secure Email and Web Manager
- Cisco Small Business RV Series
- RV110W Wireless-N VPN Firewall
- RV130 VPN Router
- RV130W Wireless-N Multifunction VPN Router
- RV215W Wireless-N VPN Router
- Cisco ISE
- Cisco Unified IP Phone 6901 when the CUCM server is in secure mode
- AppDynamics Controller
Threats:
Remote attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS)
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review Cisco security advisory and apply the necessary updates:
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-strd-xss-BqFXO9D2
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasma-info-dsc-Q9tLuOvM
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-asdm-sig-NPKvwDjm
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asasfr-cmd-inject-PE4GfdG