mickmick.net

思科產品多個漏洞

發佈日期: 2022年08月26日

風險: 中度風險

類型: 保安軟件及應用設備 - 保安軟件及應用設備

在思科產品發現多個漏洞，遠端攻擊者可利用這些漏洞在目標系統觸發阻斷服務、權限提升及遠端執行程式碼。

---

影響

• 阻斷服務
• 權限提升
• 遠端執行程式碼

---

受影響之系統或技術

詳情請參閱以下連結﹕

 

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-TxcLNZNH
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cdp-dos-ce-wWvPucC9
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-TxcLNZNH
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cdp-dos-ce-wWvPucC9
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu

---

漏洞識別碼

• CVE-2022-20823
• CVE-2022-20824
• CVE-2022-20865
• CVE-2022-20921

---

資料來源

• Cisco
• AusCERT

---

相關連結

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-TxcLNZNH
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cdp-dos-ce-wWvPucC9
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu
• https://www.auscert.org.au/bulletins/ESB-2022.4194
• https://www.auscert.org.au/bulletins/ESB-2022.4195
• https://www.auscert.org.au/bulletins/ESB-2022.4196
• https://www.auscert.org.au/bulletins/ESB-2022.4197