Cisco Security Vulnerability Thread.
-
@NashBrydges said in Cisco Security Vulnerability Thread.:
This thread just makes it seem like Cisco is asleep at the wheel. lol
This isn't even asleep at the wheel, our interns here do security better than Cisco! This is into actively malicious territory imo.
-
Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos
Only a few ASA-5500 models affected this time.
-
All your signs are belong to us: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cvdsd-wmauth
Plus the normal plethora: https://tools.cisco.com/security/center/publicationListing.x
-
Cisco Systems has agreed to settle a whistleblower’s claim that it improperly sold video surveillance software with known vulnerabilities to US federal and state governments
-
ZDNet: Patch now: Cisco IOS XE routers exposed to rare 10/10-severity security flaw.
https://www.zdnet.com/article/patch-now-cisco-ios-xe-routers-exposed-to-rare-1010-severity-security-flaw/Been a little busy with new job and big changes in my personal life. I've missed a BUNCH of things that should be here. This is one of those that you can't ignore tho.
-
-
-
Spotted online today:
-
@RojoLoco said in Cisco Security Vulnerability Thread.:
Spotted online today:
Please tell me you have the link to send me? I have to post on that one!
-
I've been way too busy to keep up with this lately, but just spotted this little doozy.
-
Another one.
-
-
@coliver said in Cisco Security Vulnerability Thread.:
@DustinB3403 said in Cisco Security Vulnerability Thread.:
Another one.
That's Citrix.
whoops
-
Lots more basic security issues. All the Cisco devices on your network. Patch now.
https://www.wired.com/story/cisco-cdp-flaws-enterprise-hacking/
-
Another CISA announcement.
https://www.us-cert.gov/ncas/current-activity/2020/02/06/cisco-releases-security-updates-multiple-products -
Another big batch of patch your stuff.
https://www.us-cert.gov/ncas/current-activity/2020/02/20/cisco-releases-security-updates
-
More security notifications on Cisco products from CISA
https://www.us-cert.gov/ncas/current-activity/2020/02/27/cisco-releases-security-updates
-
Another week, more CISA reports. Remote vulnerability in their SD-WAN software.
-
It's been a while, and they actually avoided any issues with their network gear for once.
https://www.us-cert.gov/ncas/current-activity/2020/04/16/cisco-releases-security-updates-multiple-products -
Missed a couple this week, I've been busy!
First is a number of webex and Small Business routers.
https://www.us-cert.gov/ncas/current-activity/2020/06/18/cisco-releases-multiple-security-updatesNext up is IOS XE devices with a telenet RCE.
https://www.us-cert.gov/ncas/current-activity/2020/06/25/cisco-releases-security-advisory-telnet-vulnerability-ios-xe
