Sikkerhedsrettelser fra Cisco

Cisco opdaterer en række produkter.

Cisco har udsendt en række opdateringer, der adresserer sårbarheder i forskellige Cisco-produkter. Sårbarhederne kan udnyttes af angribere til at overtage kontrollen med systemer, der er påvirket af sårbarhederne.

Der er tale om følgende produkter:

  • Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability
  • Cisco DNA Center Certificate Validation Vulnerability
  • Cisco Small Business 220 Series Smart Switches Vulnerabilities  
  • Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
  • Cisco Meeting Server API Denial of Service Vulnerability  
  • Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
  • Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability  
  • Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
  • Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability

Links:

https://us-cert.cisa.gov/ncas/current-activity/2021/06/17/cisco-releases-security-updates-multiple-products