Cisco Security Vulnerability Thread.
-
Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos
Only a few ASA-5500 models affected this time.
-
All your signs are belong to us: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cvdsd-wmauth
Plus the normal plethora: https://tools.cisco.com/security/center/publicationListing.x
-
Cisco Systems has agreed to settle a whistleblower’s claim that it improperly sold video surveillance software with known vulnerabilities to US federal and state governments
-
ZDNet: Patch now: Cisco IOS XE routers exposed to rare 10/10-severity security flaw.
https://www.zdnet.com/article/patch-now-cisco-ios-xe-routers-exposed-to-rare-1010-severity-security-flaw/Been a little busy with new job and big changes in my personal life. I've missed a BUNCH of things that should be here. This is one of those that you can't ignore tho.
-
-
-
Spotted online today:
-
@RojoLoco said in Cisco Security Vulnerability Thread.:
Spotted online today:
Please tell me you have the link to send me? I have to post on that one!
-
I've been way too busy to keep up with this lately, but just spotted this little doozy.
-
Another one.
-
-
@coliver said in Cisco Security Vulnerability Thread.:
@DustinB3403 said in Cisco Security Vulnerability Thread.:
Another one.
That's Citrix.
whoops
-
Lots more basic security issues. All the Cisco devices on your network. Patch now.
https://www.wired.com/story/cisco-cdp-flaws-enterprise-hacking/
-
Another CISA announcement.
https://www.us-cert.gov/ncas/current-activity/2020/02/06/cisco-releases-security-updates-multiple-products -
Another big batch of patch your stuff.
https://www.us-cert.gov/ncas/current-activity/2020/02/20/cisco-releases-security-updates
-
More security notifications on Cisco products from CISA
https://www.us-cert.gov/ncas/current-activity/2020/02/27/cisco-releases-security-updates
-
Another week, more CISA reports. Remote vulnerability in their SD-WAN software.
-
It's been a while, and they actually avoided any issues with their network gear for once.
https://www.us-cert.gov/ncas/current-activity/2020/04/16/cisco-releases-security-updates-multiple-products -
Missed a couple this week, I've been busy!
First is a number of webex and Small Business routers.
https://www.us-cert.gov/ncas/current-activity/2020/06/18/cisco-releases-multiple-security-updatesNext up is IOS XE devices with a telenet RCE.
https://www.us-cert.gov/ncas/current-activity/2020/06/25/cisco-releases-security-advisory-telnet-vulnerability-ios-xe -
More remote code vulnerabilities. Haven't had time to look at what product(s) yet.
https://tools.cisco.com/security/center/publicationListing.x
