Cisco Products Multiple Vulnerabilities

Release Date: 11 Nov 2022 6846 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Cisco Products. A remote attacker could exploit some of these vulnerabilities to denial of service condition, information disclosure, remote code execution, cross-site scripting and data manipulation on the targeted system.

Impact

Denial of Service
Remote Code Execution
Information Disclosure
Cross-Site Scripting
Data Manipulation

System / Technologies affected

Cisco Adaptive Security Appliance Software
Cisco FirePOWER Management Center Software
Cisco FirePOWER Software for ASA FirePOWER Module
Cisco FirePOWER Threat Defense Software
Cisco NGIPS Software
Cisco Secure Firewall 3100 Series
Cisco Server Message Block Version 2

Please refer to the link below for detail:

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier

CVE-2022-20713
CVE-2022-20745
CVE-2022-20826
CVE-2022-20831
CVE-2022-20832
CVE-2022-20833
CVE-2022-20834
CVE-2022-20835
CVE-2022-20836
CVE-2022-20838
CVE-2022-20839
CVE-2022-20840
CVE-2022-20843
CVE-2022-20854
CVE-2022-20872
CVE-2022-20905
CVE-2022-20918
CVE-2022-20922
CVE-2022-20924
CVE-2022-20925
CVE-2022-20926
CVE-2022-20927
CVE-2022-20928
CVE-2022-20932
CVE-2022-20934
CVE-2022-20935
CVE-2022-20936
CVE-2022-20938
CVE-2022-20940
CVE-2022-20941
CVE-2022-20943
CVE-2022-20946
CVE-2022-20947
CVE-2022-20949
CVE-2022-20950

Source

Cisco