漏洞分享 - 思科產品存在多個漏洞
思科產品存在多個漏洞
一、摘要
思科產品存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、跨網站指令碼、遠端執行任意程式碼及權限提升。
二、存在風險
思科產品存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、跨網站指令碼、遠端執行任意程式碼及權限提升，其影響系統如下：
- 受影響之系統/漏洞描述：
- Cisco IEC6400 Wireless Backhaul Edge Compute Software
- Cisco Intersight Connected Virtual Appliance (CVA)
- Cisco Intersight Private Virtual Appliance (PVA)
- Cisco Packaged CCE
- Cisco Unified CCE
- Cisco Unified CM
- Cisco Unified CM IM&P
- Cisco Unified CM SME
- Cisco Unity Connection
- Cisco Webex Calling Dedicated Instance
三、建議改善措施
企業及使用者如有上述漏洞版本應儘速更新。
情資報告連結：
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b
