1. 主頁
  2. 保安警報
  3. 保安警報 (A22-10-04)

保安警報 (A22-10-04): Cisco 產品多個漏洞


 

發布日期: 2022年 10月 6日

  
  

描述:

Cisco 發布了安全公告，以應對 Cisco 裝置及軟件中的多個漏洞。有關漏洞及攻擊向量的資料，請參閱供應商網站的相應安全公告。

 

受影響的系統:

  • Cisco ATA 190 Series Analog Telephone Adapter Software
  • Cisco BroadWorks Hosted Thin Receptionist
  • Cisco Enterprise NFV Infrastructure Software
  • Cisco Expressway Series
  • Cisco Jabber Client Software
  • Cisco Secure Web Appliance
  • Cisco Smart Software Manager On-Prem
  • Cisco TelePresence Video Communication Server
  • Cisco Touch 10 Devices

有關受影響產品的詳細資料，請參閱供應商網站的相應安全公告中有關 “Affected Products” 的部分。

 

影響:

成功利用漏洞可以在受影響的系統導致遠端執行程式碼、跨網址程式編程、權限提升、繞過保安限制或篡改，視乎攻擊者利用哪些漏洞而定。

 

建議:

現已有適用於受影響系統的軟件更新。受影響系統的系統管理員應遵從產品供應商的建議，立即採取行動以降低風險。有關修補程式的詳細資料，請參閱供應商網站的相應安全公告中有關 “Fixed Software”的部分。

系統管理員可聯絡其產品支援供應商，以取得修補程式及有關支援。

 

進一步資訊:

  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-thinrcpt-xss-gSj4CecU
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-priv-esc-SEjz69dv
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-DAV-HSvEHHEt
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-IVV-4A66Dsfj
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-ISV-BQrvEv2h
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-bypass-bwBfugek
  • https://www.hkcert.org/tc/security-bulletin/cisco-products-multiple-vulnerabilities_20221006
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20686 (to CVE-2022-20691)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20766
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20793
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20814
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20853
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20917
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20929
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20931
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20939
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20948
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20952


標籤 : Cisco , Cisco ATA , Cisco BroadWorks Hosted Thin Receptionist , Cisco Enterprise NFV Infrastructure , Cisco Expressway Series , Cisco Jabber , Cisco Secure Web Appliance , Cisco Smart Software Manager , Cisco TelePresence VCS , Cisco Touch
標籤