2023年1月13日星期五

Cisco Products Multiple Vulnerabilities

Release Date: 13 Jan 2023

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

TYPE: Security Software & Appliance

Multiple vulnerabilities were identified in Cisco Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, data manipulation, cross-site scripting and security restriction bypass on the targeted system.

Impact

  • Remote Code Execution
  • Cross-Site Scripting
  • Security Restriction Bypass
  • Information Disclosure
  • Denial of Service
  • Data Manipulation

System / Technologies affected

  • Cisco BroadWorks Application Delivery Platform Device Management Software
  • Cisco BroadWorks Application Server
  • Cisco BroadWorks Xtended Services Platform
  • Cisco CX Cloud Agent
  • Cisco IND
  • Cisco NSO
  • IP Phone 7800 Series
  • IP Phone 8800 Series
  • Packaged Contact Center Enterprise (CCE)
  • RoomOS Software in cloud-aware on-premises operation, which is cloud based
  • RV160 VPN Routers
  • RV160W Wireless-AC VPN Routers
  • RV260 VPN Routers
  • RV260P VPN Routers with PoE
  • RV260W Wireless-AC VPN Routers
  • RV340 Dual WAN Gigabit VPN Routers
  • RV340W Dual WAN Gigabit Wireless-AC VPN Routers
  • RV345 Dual WAN Gigabit VPN Routers
  • RV345P Dual WAN Gigabit POE VPN Routers
  • TelePresence CE Software
  • Unified CCE
  • Unified Contact Center Express (CCX)
  • Webex Room Phone
  • Webex Share

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

思科產品多個漏洞

思科產品多個漏洞 於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況，資料篡改及繞過保安限制。 影響 阻斷服務 繞過保安限制 篡改 受影響之系統或技術 Cisco IOS Cisco IOS XE 請參考供應商發佈的連結以了解受影響的版本： https:...