漏洞分享 - 思科產品存在多個漏洞
思科產品存在多個漏洞
一、摘要
於思科產品存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料、資料篡改、跨網站指令碼及繞過身份驗證。
二、存在風險
於思科產品存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料、資料篡改、跨網站指令碼及繞過身份驗證，其影響系統或版本如下：
- 受影響之系統/漏洞描述：
- 1000 Series Integrated Services Routers (ISRs) running a vulnerable release of Cisco IOS XE Software
- 1000 Series Integrated Services Routers (ISRs) running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- 4000 Series ISRs running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Catalyst 8000v Edge Software running a vulnerable release of Cisco IOS XE Software
- Catalyst 8000V Edge Software running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Catalyst 8200 Series Edge Platforms running a vulnerable release of Cisco IOS XE Software
- Catalyst 8200 Series Edge Platforms running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Catalyst 8300 Series Edge Platforms running a vulnerable release of Cisco IOS XE Software
- Catalyst 8300 Series Edge Platforms running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Catalyst 8500L Edge Platforms running a vulnerable release of Cisco IOS XE Software
- Catalyst 8500L Series Edge Platforms running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Catalyst 9300X Series Switches running a vulnerable release of Cisco IOS XE Software
- Catalyst 9400X Supervisor Engines running a vulnerable release of Cisco IOS XE Software
- Catalyst 9500X Series Switches running a vulnerable release of Cisco IOS XE Software
- Catalyst 9600 Series Switches running a vulnerable release of Cisco IOS XE Software
- Catalyst 9800 Embedded Wireless Controllers for Catalyst 9300, 9400, and 9500 Series Switches running a vulnerable release of Cisco IOS XE Software
- Catalyst 9800 Series Wireless Controllers running a vulnerable release of Cisco IOS XE Software
- Catalyst 9800-CL Wireless Controllers for Cloud running a vulnerable release of Cisco IOS XE Software
- Catalyst IR8300 Rugged Series Routers running a vulnerable release of Cisco IOS XE Software
- Catalyst IR8300 Rugged Series Routers running a vulnerable release of Cisco UTD Snort IPS Engine for Cisco IOS XE Software
- Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 17.12.1 or 17.12.1a.
- Cisco Catalyst Center
- Cisco Catalyst SD-WAN Manager
- Cisco cBR-8 Converged Broadband Routers running Cisco IOS XE Software Release 17.12.1 or 17.12.1a.
- Cisco IOS and IOS XE Software
- Crosswork NSO
- Embedded Wireless Controllers on Catalyst Access Points running a vulnerable release of Cisco IOS XE Software
- Industrial Ethernet 4000 Series Switches running Cisco IOS Software Release 15.2(8)E2 or later
- Industrial Ethernet 4010 Series Switches running Cisco IOS Software Release 15.2(8)E2 or later
- Industrial Ethernet 5000 Series Switches running Cisco IOS Software Release 15.2(8)E2 or later
- Optical Site Manager
- RV340 Dual WAN Gigabit VPN Routers
- SD-WAN vEdge Cloud Routers
- SD-WAN vEdge Routers
三、建議改善措施：
企業及使用者如有上述漏洞版本應儘速更新。
情資報告連結：
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpp-vfr-dos-nhHKGgO
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ssh-e4uOdASj
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-httpsrvr-dos-yOZThut
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-HfwnRgk
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sda-edge-dos-MBcbG9k
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pim-APbVfySJ
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-repacl-9eXgnBpD
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rsvp-dos-OypvgVZf
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-vedos-KqFfhps3
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-utd-dos-hDATqxs
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-xss-zQ4KPvYd
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-utd-snort3-dos-bypas-b4OUEwxD
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vlan-dos-27Pur5RT
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-csrf-ycUYxkKO
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-cwa-acl-nPSbHSnA
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-auth-bypass-QnTEesp
