1. 主页
  2. 保安警报
  3. 保安警报 (A22-04-16)

保安警报 (A22-04-16): Cisco 产品多个漏洞


 

发布日期: 2022年 4月 14日

  
  

描述:

Cisco 发布了安全公告，以应对发现於 Cisco 装置及软件的多个漏洞。有关漏洞及攻击向量的资料，请参阅供应商网站的相应安全公告。

 

受影响的系统:

  • Cisco 1000 Series Connected Grid Router
  • Cisco Catalyst Digital Building Series Switches
  • Cisco Catalyst Micro Switches
  • Cisco D-WAN vBond Orchestrator Software
  • Cisco Embedded Wireless Controller with Catalyst Access Points Software
  • Cisco IOS Software
  • Cisco IOS XE Software
  • Cisco IOS XR Software
  • Cisco IOx Application Hosting Environment
  • Cisco SD-WAN vEdge Routers
  • Cisco SD-WAN vManage Software
  • Cisco SD-WAN vSmart Controller Software
  • Cisco Wireless LAN Controller Software

有关受影响产品的详细资料，请参阅供应商网站的相应安全公告中有关 “Affected Products” 的部分。

 

影响:

成功利用这些漏洞可以在受影响的系统导致插入任意指令码、跨网址请求伪造、跨网址程式编程、服务被拒绝、泄漏资讯、权限提升或绕过保安限制，视乎攻击者利用哪些漏洞而定。

 

建议:

现已有适用於受影响系统的软件更新。受影响系统的系统管理员应遵从产品供应商的建议，立即采取行动以降低风险。有关修补程式的详细资料，请参阅供应商网站的相应安全公告中“Fixed Software” 的部分。

系统管理员可联络其产品支援供应商，以取得修补程式及有关支援。

 

进一步信息:

  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-auth-bypass-JRNhV4fF
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webuiapi-inj-Nyrq92Od
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-csrf-rxQL4tXR
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-infodis-73sHJNEq
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vedge-dos-jerVm4bB
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-file-access-VW36d28P
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qfp-ipsec-GQmqvtqV
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncossh-dos-ZAkfOdq8
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lsplus-Z6AQEOjk
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-rpki-dos-2EgCNeKE
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-grbtubU
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-dos-svOdkdBS
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-priv-esc-ybvHKO5
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cgr1k-ap-dos-mSZR4QVh
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-snmp-trap-dos-mjent3Ey
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-capwap-mdns-6PSn7gKU
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBb
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appnav-xe-dos-j5MXTR4
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20622
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20661
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20676 (to CVE-2022-20679)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20681 (to CVE-2022-20684)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20692 (to CVE-2022-20695)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20697
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20714
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20716 (to CVE-2022-20727)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20731
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20735
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20739
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20747
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20758
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20761


标签 : Cisco , Cisco Router , Cisco Catalyst Switches , Cisco Embedded Wireless Controller , Cisco IOS , Cisco IOx , Cisco SD-WAN , Cisco Wireless LAN Controller
标签