—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1
Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2020-April-15.
The following PSIRT security advisories (3 Critical, 7 High) were published at 16:00 UTC today.
Table of Contents:
1) Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data – SIR: Critical
2) Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability – SIR: Critical
3) Cisco IP Phones Web Application Buffer Overflow Vulnerability – SIR: Critical
4) Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability – SIR: High
5) Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability – SIR: High
6) Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability – SIR: High
7) Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability – SIR: High
8) Cisco Unified Communications Manager Path Traversal Vulnerability – SIR: High
9) Cisco IoT Field Network Director Denial of Service Vulnerability – SIR: High
10) Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability – SIR: High
+——————————————————————–
1) Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
CVE-2020-3239, CVE-2020-3240, CVE-2020-3243, CVE-2020-3247, CVE-2020-3248, CVE-2020-3249, CVE-2020-3250, CVE-2020-3251, CVE-2020-3252
SIR: Critical
CVSS Score v(3.0): 9.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E”]
+——————————————————————–
2) Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability
CVE-2020-3161
SIR: Critical
CVSS Score v(3.0): 9.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs”]
+——————————————————————–
3) Cisco IP Phones Web Application Buffer Overflow Vulnerability
CVE-2016-1421
SIR: Critical
CVSS Score v(3.0): 9.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-ipp [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-ipp”]
+——————————————————————–
4) Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability
CVE-2020-3273
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-gas-dos-8FsE3AWH [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-gas-dos-8FsE3AWH”]
+——————————————————————–
5) Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability
CVE-2020-3261
SIR: High
CVSS Score v(3.0): 8.1
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mob-exp-csrf-b8tFec24 [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mob-exp-csrf-b8tFec24”]
+——————————————————————–
6) Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability
CVE-2020-3260
SIR: High
CVSS Score v(3.0): 7.4
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-dos-5ZLs6ESz [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-dos-5ZLs6ESz”]
+——————————————————————–
7) Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability
CVE-2020-3194
SIR: High
CVSS Score v(3.0): 7.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-player-Q7Rtgvby [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-player-Q7Rtgvby”]
+——————————————————————–
8) Cisco Unified Communications Manager Path Traversal Vulnerability
CVE-2020-3177
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-taps-path-trav-pfsFO93r [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-taps-path-trav-pfsFO93r”]
+——————————————————————–
9) Cisco IoT Field Network Director Denial of Service Vulnerability
CVE-2020-3162
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-coap-dos-WTBu6YTq [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-coap-dos-WTBu6YTq”]
+——————————————————————–
10) Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability
CVE-2020-3262
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-capwap-dos-Y2sD9uEw [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-capwap-dos-Y2sD9uEw”]
—–BEGIN PGP SIGNATURE—–
iQJ5BAEBAgBjBQJelzCEXBxDaXNjbyBQcm9kdWN0IFNlY3VyaXR5IEluY2lkZW50
IFJlc3BvbnNlIFRlYW0gKENpc2NvIFBTSVJUIGtleSAyMDIwLTIwMjEpIDxwc2ly
dEBjaXNjby5jb20+AAoJELm9eRtXgZjIDoYQALc4T3VYnT4EvD9roADcWSh+zWio
8Wq/53Oz/0qSMnOKm2m3HWrrz6t+oAvmqj0Sn5Xuszks6Pljiq5k6Y7lkxkc8FLl
YzoV6Vah3Euwhxslz4ljP9O4qBt4F37p+xfYcJq1d/qUamYwaMb5Wl4F40TYeBQL
sq6VCwpwCeUOuJ+U/Es3imIpG1Dl9LUWcc/CyeiT8FuF+VwBlnYB0O23SfJLx4CM
6ZdPW9yFJBcWO0fwyj19F6cWXp1+DkYjIcr4Re/yH7Ucqryy+QQvDRRGmI+de+1d
MTFps+dF8rTccmd5htT/YEYVYPXxX2PDcnXqNlhpbm0wIuskdrVH/wZjtPRPyA5Z
nA/zX1M9E3kyFc0hgFVZLC36n5RR4X86GxB9Alb8B4HCSMwundVso6GN7if/7Sdw
uVh3uswVT77bMAXc+4+lp5Yhf9AAHl/z/e69oyELnPIVwI4OXayfXmVJFhl8w2Sg
aMaXir9GWpSxUaftzg2vXlMpATD92OlPrm3GpwYeQWZdfcp0zP0p7bkGQjIo4w7Y
YKep2J3peadz9R/sjUX/6miriBXTIZZFJ3CGqcULd6pUWVZx6letYtkfmCLfsRrk
Gz+jJeiOjZ8xQ3JxyUkqShFUR7u0xZDUpKnH5TIx8sIIi8IFxhv+JK2ykgSVFFLW
x+6Lom55Tg5CzvQ6
=We1F
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
