​

Cisco публикува обновление за подобрение на защитата чрез отстраняване на уязвимости в множество продукти на Cisco. Нападател може да използва тези уязвимости, за да поеме контрола върху засегнатата система. За повече информация: Cisco Security Advisories.

CERT България препоръчва на потребителите и администраторите да прегледат следните препоръки на Cisco и да приложат необходимите актуализации:

• Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy
• Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability cisco-sa-rv-code-execution-9UVJr7k4
• Cisco Packet Tracer for Windows DLL Injection Vulnerability cisco-sa-packettracer-dll-inj-Qv8Mk5Jx
• Cisco Network Services Orchestrator CLI Secure Shell Server Privilege Escalation Vulnerability cisco-sa-nso-priv-esc-XXqRtTfT
• ConfD CLI Secure Shell Server Privilege Escalation Vulnerability cisco-sa-confd-priv-esc-LsGtCRx4

https://tools.cisco.com/security/center/publicationListing.x

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-code-execution-9UVJr7k4

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-packettracer-dll-inj-Qv8Mk5Jx

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-priv-esc-XXqRtTfT

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confd-priv-esc-LsGtCRx4