—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1
Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2020-August-26.
The following PSIRT security advisories (7 High) were published at 16:00 UTC today.
Table of Contents:
1) Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability – SIR: High
2) Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability – SIR: High
3) Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability – SIR: High
4) Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability – SIR: High
5) Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability – SIR: High
6) Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability – SIR: High
7) Cisco NX-OS Software Call Home Command Injection Vulnerability – SIR: High
+——————————————————————–
1) Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability
CVE-2020-3415
SIR: High
CVSS Score v(3.0): 8.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-dme-rce-cbE3nhZS [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-dme-rce-cbE3nhZS”]
+——————————————————————–
2) Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
CVE-2020-3517
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd”]
+——————————————————————–
3) Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability
CVE-2020-3394
SIR: High
CVSS Score v(3.0): 7.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3n9k-priv-escal-3QhXJBC [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3n9k-priv-escal-3QhXJBC”]
+——————————————————————–
4) Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability
CVE-2020-3398
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-mvpn-dos-K8kbCrJp [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-mvpn-dos-K8kbCrJp”]
+——————————————————————–
5) Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability
CVE-2020-3397
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-nlri-dos-458rG2OQ [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-nlri-dos-458rG2OQ”]
+——————————————————————–
6) Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability
CVE-2020-3338
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-pim-memleak-dos-tC8eP7uw [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-pim-memleak-dos-tC8eP7uw”]
+——————————————————————–
7) Cisco NX-OS Software Call Home Command Injection Vulnerability
CVE-2020-3454
SIR: High
CVSS Score v(3.0): 7.2
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-callhome-cmdinj-zkxzSCY [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-callhome-cmdinj-zkxzSCY”]
—–BEGIN PGP SIGNATURE—–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=yYM7
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
