Security Alert (A24-04-06): Multiple Vulnerabilities in Cisco Products


 

Published on: 05 April 2024

  
  

Description:

Cisco released security advisories to address multiple vulnerabilities in Cisco products. For information about the vulnerabilities and the attacking vectors, please refer to the corresponding security advisories at the vendor's website.

 

Affected Systems:

  • Cisco Emergency Responder
  • Cisco Enterprise Chat and Email
  • Cisco Identity Services Engine
  • Cisco Nexus Dashboard
  • Cisco Nexus Dashboard Fabric Controller
  • Cisco Nexus Dashboard Orchestrator
  • Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers
  • Cisco TelePresence Management Suite
  • Cisco Unified Communications Manager IM & Presence Service

For detailed information of the affected systems, please refer to the section "Affected Products" of corresponding security advisory at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to information disclosure, elevation of privilege, security restriction bypass or spoofing of affected system.

 

Recommendation:

Patches for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk. For detailed information of the available patches, please refer to the section "Fixed Software" of corresponding security advisory at vendor's website.

System administrators should contact their vendors for the fixes and assistance.

 

More Information:

  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cem-csrf-suCmNjFr
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-imps-xss-quWkd9yF
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-xss-CSQxgxfM
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-csrf-NfAKXrp5
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-ssrf-FtSTh5Oz
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-dir-trav-SSn3AYDw
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfccsrf-TEmZEfJ9
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndidv-LmXdvAf2
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndo-upav-YRqsCcSP
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndru-pesc-kZ2PQLZH
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbiz-rv-xss-OQeRTup
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tms-xss-kGw4DX9Y
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20281 (to CVE-2024-20283)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20302
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20310
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20332
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20334
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20347 (to CVE-2024-20348)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20352
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20362
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20367 (to CVE-2024-20368)


Tag: Cisco , Cisco Emergency Responder , Cisco Enterprise Chat and Email , Cisco Identity Services Engine , Cisco Nexus Dashboard , Cisco Router , Cisco TelePresence Management Suite , Cisco Unified Communications
Tags