思科產品多個漏洞
發佈日期: 2026年08月12日
於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞,於目標系統觸發阻斷服務狀況及敏感資料洩露。
注意:
CVE-2026-20349 正在被廣泛利用。 如果已啟用 Remote Access SSL VPN 服務,遠端攻擊者可利用此漏洞於目標系統觸發阻斷服務狀況。因此,此漏洞的風險等級被評為高度風險。
影響
- 阻斷服務
- 資料洩露
受影響之系統或技術
- Cisco Secure Endpoint Connector
- Cisco Secure Firewall ASA Software
- Cisco Secure FMC Software
- Cisco Secure FTD Software
- Cisco Catalyst SD-WAN Manager
請參考供應商發佈的連結以了解受影響的版本:
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe
解決方案
在安裝軟體之前,請先瀏覽供應商之網站,以獲得更多詳細資料。
安裝供應商提供的修補程式:
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe
漏洞識別碼
- CVE-2026-20294
- CVE-2026-20316
- CVE-2026-20337
- CVE-2026-20338
- CVE-2026-20339
- CVE-2026-20345
- CVE-2026-20346
- CVE-2026-20347
- CVE-2026-20348
- CVE-2026-20349
資料來源
相關連結
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe
沒有留言:
發佈留言