1. 主頁
  2. 保安警報
  3. 保安警報 (A22-04-16)

保安警報 (A22-04-16): Cisco 產品多個漏洞


 

發布日期: 2022年 4月 14日

  
  

描述:

Cisco 發布了安全公告，以應對發現於 Cisco 裝置及軟件的多個漏洞。有關漏洞及攻擊向量的資料，請參閱供應商網站的相應安全公告。

 

受影響的系統:

  • Cisco 1000 Series Connected Grid Router
  • Cisco Catalyst Digital Building Series Switches
  • Cisco Catalyst Micro Switches
  • Cisco D-WAN vBond Orchestrator Software
  • Cisco Embedded Wireless Controller with Catalyst Access Points Software
  • Cisco IOS Software
  • Cisco IOS XE Software
  • Cisco IOS XR Software
  • Cisco IOx Application Hosting Environment
  • Cisco SD-WAN vEdge Routers
  • Cisco SD-WAN vManage Software
  • Cisco SD-WAN vSmart Controller Software
  • Cisco Wireless LAN Controller Software

有關受影響產品的詳細資料，請參閱供應商網站的相應安全公告中有關 “Affected Products” 的部分。

 

影響:

成功利用這些漏洞可以在受影響的系統導致插入任意指令碼、跨網址請求偽造、跨網址程式編程、服務被拒絕、泄漏資訊、權限提升或繞過保安限制，視乎攻擊者利用哪些漏洞而定。

 

建議:

現已有適用於受影響系統的軟件更新。受影響系統的系統管理員應遵從產品供應商的建議，立即採取行動以降低風險。有關修補程式的詳細資料，請參閱供應商網站的相應安全公告中“Fixed Software” 的部分。

系統管理員可聯絡其產品支援供應商，以取得修補程式及有關支援。

 

進一步資訊:

  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-auth-bypass-JRNhV4fF
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webuiapi-inj-Nyrq92Od
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-csrf-rxQL4tXR
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-infodis-73sHJNEq
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vedge-dos-jerVm4bB
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-file-access-VW36d28P
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qfp-ipsec-GQmqvtqV
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncossh-dos-ZAkfOdq8
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lsplus-Z6AQEOjk
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-rpki-dos-2EgCNeKE
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-grbtubU
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-dos-svOdkdBS
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-priv-esc-ybvHKO5
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cgr1k-ap-dos-mSZR4QVh
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-snmp-trap-dos-mjent3Ey
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-capwap-mdns-6PSn7gKU
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBb
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appnav-xe-dos-j5MXTR4
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20622
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20661
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20676 (to CVE-2022-20679)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20681 (to CVE-2022-20684)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20692 (to CVE-2022-20695)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20697
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20714
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20716 (to CVE-2022-20727)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20731
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20735
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20739
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20747
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20758
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20761


標籤 : Cisco , Cisco Router , Cisco Catalyst Switches , Cisco Embedded Wireless Controller , Cisco IOS , Cisco IOx , Cisco SD-WAN , Cisco Wireless LAN Controller
標籤