Cisco Products Multiple Vulnerabilities
RISK: High Risk
TYPE: Security software and application - Security Software & Appliance
Multiple vulnerabilities were identified in Cisco Products, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition,elevation of privilege, spoofing, remote code execution, information disclosure, security restriction bypass, data manipulation and cross-site scripting on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Spoofing
- Remote Code Execution
- Data Manipulation
- Security Restriction Bypass
- Cross-Site Scripting
- Information Disclosure
System / Technologies affected
- Cisco Policy Suite
- Cisco Catalyst PON Series Switches
- Cisco Business Series Switches
- Cisco Email Security Appliance
- Cisco Webex
- Cisco Umbrella
- Cisco Small Business Series Switches
- Cisco Small Business RV Series Routers
- Cisco Prime
- Cisco AnyConnect
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-JOm9ETfO
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmesh-openred-AGNRmf5
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-csrf-xrTkDu3H
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-xss-U2JK537j
Vulnerability Identifier
- CVE-2021-1500
- CVE-2021-34701
- CVE-2021-34731
- CVE-2021-34739
- CVE-2021-34741
- CVE-2021-34773
- CVE-2021-34774
- CVE-2021-34784
- CVE-2021-34795
- CVE-2021-40112
- CVE-2021-40113
- CVE-2021-40115
- CVE-2021-40119
- CVE-2021-40120
- CVE-2021-40124
- CVE-2021-40126
- CVE-2021-40127
- CVE-2021-40128
Source
Related Link
https://tools.cisco.com/security/center/publicationListing.x
Related Tags
Share with