Cisco Products Multiple Vulnerabilities

Last Update Date: 17 Nov 2017 10:16 Release Date: 17 Nov 2017 4153 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attack, perform remote code execution, trigger denial of service conditions, obtain elevated privileges, obtain potentially sensitive information and bypass security restriction on the target system.

Impact

Cross-Site Scripting
Denial of Service
Elevation of Privilege
Remote Code Execution
Security Restriction Bypass
Information Disclosure

System / Technologies affected

Cisco Voice Operating System
Cisco FindIT Network Discovery Utility
Cisco Web Security Appliance
Cisco Umbrella Insights Virtual Appliance
Cisco Unified Communications Manager
Cisco Spark Board
Cisco RF Gateway
Cisco Registered Envelope Service
Cisco Identity Services Engine (ISE)
Cisco IP Phone 8800 Series
Cisco IOS and IOS XE Software
Cisco Immunet Antimalware Installer
Cisco HyperFlex System
Cisco Firepower System Software
Cisco ASA Next-Generation Firewall Services
Cisco Email Security Appliance
Cisco Network Academy Packet Tracer
Cisco Meeting Server

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.

Vulnerability Identifier

Source

Cisco