—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1
Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2020-November-18.
The following PSIRT security advisories (3 Critical, 3 High) were published at 16:00 UTC today.
Table of Contents:
1) Cisco DNA Spaces Connector Command Injection Vulnerability – SIR: Critical
2) Cisco IoT Field Network Director Unauthenticated REST API Vulnerability – SIR: Critical
3) Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities – SIR: Critical
4) Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability – SIR: High
5) Cisco IoT Field Network Director Missing API Authentication Vulnerability – SIR: High
6) Cisco Secure Web Appliance Privilege Escalation Vulnerability – SIR: High
+——————————————————————–
1) Cisco DNA Spaces Connector Command Injection Vulnerability
CVE-2020-3586
SIR: Critical
CVSS Score v(3.1): 9.4
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dna-cmd-injection-rrAYzOwc [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dna-cmd-injection-rrAYzOwc”]
+——————————————————————–
2) Cisco IoT Field Network Director Unauthenticated REST API Vulnerability
CVE-2020-3531
SIR: Critical
CVSS Score v(3.0): 9.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-BCK-GHkPNZ5F [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-BCK-GHkPNZ5F”]
+——————————————————————–
3) Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities
CVE-2020-3470
SIR: Critical
CVSS Score v(3.1): 9.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-api-rce-UXwpeDHd [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-api-rce-UXwpeDHd”]
+——————————————————————–
4) Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability
CVE-2020-26072
SIR: High
CVSS Score v(3.0): 8.7
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-AUTH-vEypBmmR [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-AUTH-vEypBmmR”]
+——————————————————————–
5) Cisco IoT Field Network Director Missing API Authentication Vulnerability
CVE-2020-3392
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-APIA-xZntFS2V [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-APIA-xZntFS2V”]
+——————————————————————–
6) Cisco Secure Web Appliance Privilege Escalation Vulnerability
CVE-2020-3367
SIR: High
CVSS Score v(3.0): 5.3
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-prv-esc-nPzWZrQj [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-prv-esc-nPzWZrQj”]
—–BEGIN PGP SIGNATURE—–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=ste6
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
