Cisco Security Advisories · January 2016 — Cisco Security Advisories
25 advisories 36 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2016-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20160129-openssl

Cisco PSIRTWeaponized exploit2016-01-29

Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products

CVEs:CVE-2015-3197CVE-2016-0701

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-111803 affected Cisco
CVRFPID-112250 affected Cisco
CVRFPID-189790 affected Cisco
CVRFPID-190702 affected Cisco
CVRFPID-192127 affected Cisco
CVRFPID-194328 affected Cisco
CVRFPID-194833 affected Cisco
CVRFPID-198393 affected Cisco
CVRFPID-202683 affected Cisco
CVRFPID-203051 affected Cisco
CVRFPID-203607 affected Cisco
CVRFPID-203614 affected Cisco
CVRFPID-203755 affected Cisco
CVRFPID-205455 affected Cisco
CVRFPID-2078 affected Cisco
CVRFPID-208962 affected Cisco
CVRFPID-209583 affected Cisco
CVRFPID-210583 affected Cisco
CVRFPID-210610 affected Cisco
CVRFPID-210644 affected Cisco
CVRFPID-210834 affected Cisco
CVRFPID-210837 affected Cisco
CVRFPID-210903 affected Cisco
CVRFPID-213561 affected Cisco
CVRFPID-225817 affected Cisco
CVRFPID-4844 affected Cisco
CVRFPID-5239 affected Cisco
CVRFPID-5940 affected Cisco
CVRFPID-6046 affected Cisco
CVRFPID-6439 affected Cisco
CVRFPID-73608 affected Cisco
CVRFPID-7500 affected Cisco
CVRFPID-77997 affected Cisco
CVRFPID-92631 affected Cisco
Upstream advisory

cisco-sa-20160127-ntpd

Cisco PSIRTPoC exploit2016-01-27

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016

CVEs:CVE-2015-7974CVE-2015-7975CVE-2015-7976CVE-2015-7978CVE-2015-7977CVE-2015-7979CVE-2015-8138CVE-2015-8139CVE-2015-8140CVE-2015-8158CVE-2015-7973

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100637 affected Cisco
CVRFPID-111580 affected Cisco
CVRFPID-111903 affected Cisco
CVRFPID-112250 affected Cisco
CVRFPID-112457 affected Cisco
CVRFPID-112458 affected Cisco
CVRFPID-115622 affected Cisco
CVRFPID-117634 affected Cisco
CVRFPID-184480 affected Cisco
CVRFPID-184481 affected Cisco
CVRFPID-184512 affected Cisco
CVRFPID-184690 affected Cisco
CVRFPID-185359 affected Cisco
CVRFPID-188426 affected Cisco
CVRFPID-188726 affected Cisco
CVRFPID-189516 affected Cisco
CVRFPID-190324 affected Cisco
CVRFPID-190474 affected Cisco
CVRFPID-190702 affected Cisco
CVRFPID-190707 affected Cisco
CVRFPID-191391 affected Cisco
CVRFPID-191392 affected Cisco
CVRFPID-191393 affected Cisco
CVRFPID-191394 affected Cisco
CVRFPID-191395 affected Cisco
CVRFPID-191396 affected Cisco
CVRFPID-191397 affected Cisco
CVRFPID-191398 affected Cisco
CVRFPID-191399 affected Cisco
CVRFPID-191400 affected Cisco
CVRFPID-191401 affected Cisco
CVRFPID-191402 affected Cisco
CVRFPID-191403 affected Cisco
CVRFPID-191404 affected Cisco
CVRFPID-191405 affected Cisco
CVRFPID-191406 affected Cisco
CVRFPID-191407 affected Cisco
CVRFPID-191408 affected Cisco
CVRFPID-191409 affected Cisco
CVRFPID-191410 affected Cisco
CVRFPID-191411 affected Cisco
CVRFPID-191412 affected Cisco
CVRFPID-191413 affected Cisco
CVRFPID-191414 affected Cisco
CVRFPID-191415 affected Cisco
CVRFPID-191416 affected Cisco
CVRFPID-191417 affected Cisco
CVRFPID-191418 affected Cisco
CVRFPID-191419 affected Cisco
CVRFPID-191420 affected Cisco
CVRFPID-191421 affected Cisco
CVRFPID-191422 affected Cisco
CVRFPID-191423 affected Cisco
CVRFPID-191424 affected Cisco
CVRFPID-191425 affected Cisco
CVRFPID-191426 affected Cisco
CVRFPID-191427 affected Cisco
CVRFPID-191428 affected Cisco
CVRFPID-191429 affected Cisco
CVRFPID-191430 affected Cisco
CVRFPID-191431 affected Cisco
CVRFPID-191432 affected Cisco
CVRFPID-191433 affected Cisco
CVRFPID-191434 affected Cisco
CVRFPID-191435 affected Cisco
CVRFPID-191436 affected Cisco
CVRFPID-191437 affected Cisco
CVRFPID-191438 affected Cisco
CVRFPID-191439 affected Cisco
CVRFPID-191440 affected Cisco
CVRFPID-191441 affected Cisco
CVRFPID-191442 affected Cisco
CVRFPID-191443 affected Cisco
CVRFPID-191444 affected Cisco
CVRFPID-191445 affected Cisco
CVRFPID-191446 affected Cisco
CVRFPID-191447 affected Cisco
CVRFPID-191448 affected Cisco
CVRFPID-191449 affected Cisco
CVRFPID-191450 affected Cisco
CVRFPID-191451 affected Cisco
CVRFPID-191452 affected Cisco
CVRFPID-191453 affected Cisco
CVRFPID-191454 affected Cisco
CVRFPID-191455 affected Cisco
CVRFPID-191456 affected Cisco
CVRFPID-191457 affected Cisco
CVRFPID-191458 affected Cisco
CVRFPID-191459 affected Cisco
CVRFPID-191466 affected Cisco
CVRFPID-191467 affected Cisco
CVRFPID-191468 affected Cisco
CVRFPID-191469 affected Cisco
CVRFPID-191470 affected Cisco
CVRFPID-191471 affected Cisco
CVRFPID-191472 affected Cisco
CVRFPID-191473 affected Cisco
CVRFPID-191474 affected Cisco
CVRFPID-191475 affected Cisco
CVRFPID-191476 affected Cisco
CVRFPID-191477 affected Cisco
CVRFPID-191478 affected Cisco
CVRFPID-191479 affected Cisco
CVRFPID-191480 affected Cisco
CVRFPID-191481 affected Cisco
CVRFPID-191482 affected Cisco
CVRFPID-191483 affected Cisco
CVRFPID-191484 affected Cisco
CVRFPID-191485 affected Cisco
CVRFPID-191687 affected Cisco
CVRFPID-192324 affected Cisco
CVRFPID-192563 affected Cisco
CVRFPID-192564 affected Cisco
CVRFPID-192918 affected Cisco
CVRFPID-193469 affected Cisco
CVRFPID-194456 affected Cisco
CVRFPID-194693 affected Cisco
CVRFPID-194694 affected Cisco
CVRFPID-194730 affected Cisco
CVRFPID-194731 affected Cisco
CVRFPID-194732 affected Cisco
CVRFPID-194735 affected Cisco
CVRFPID-194736 affected Cisco
CVRFPID-194737 affected Cisco
CVRFPID-194833 affected Cisco
CVRFPID-194842 affected Cisco
CVRFPID-194843 affected Cisco
CVRFPID-195223 affected Cisco
CVRFPID-195235 affected Cisco
CVRFPID-196216 affected Cisco
CVRFPID-196218 affected Cisco
CVRFPID-196220 affected Cisco
CVRFPID-196221 affected Cisco
CVRFPID-196222 affected Cisco
CVRFPID-196223 affected Cisco
CVRFPID-196224 affected Cisco
CVRFPID-196225 affected Cisco
CVRFPID-196226 affected Cisco
CVRFPID-196227 affected Cisco
CVRFPID-196228 affected Cisco
CVRFPID-196230 affected Cisco
CVRFPID-196231 affected Cisco
CVRFPID-196287 affected Cisco
CVRFPID-196288 affected Cisco
CVRFPID-196607 affected Cisco
CVRFPID-196608 affected Cisco
CVRFPID-196609 affected Cisco
CVRFPID-196610 affected Cisco
CVRFPID-196611 affected Cisco
CVRFPID-196612 affected Cisco
CVRFPID-196613 affected Cisco
CVRFPID-196614 affected Cisco
CVRFPID-196615 affected Cisco
CVRFPID-196616 affected Cisco
CVRFPID-196617 affected Cisco
CVRFPID-196925 affected Cisco
CVRFPID-197112 affected Cisco
CVRFPID-197145 affected Cisco
CVRFPID-197708 affected Cisco
CVRFPID-198123 affected Cisco
CVRFPID-198124 affected Cisco
CVRFPID-198125 affected Cisco
CVRFPID-198393 affected Cisco
CVRFPID-198535 affected Cisco
CVRFPID-198539 affected Cisco
CVRFPID-200768 affected Cisco
CVRFPID-200770 affected Cisco
CVRFPID-200771 affected Cisco
CVRFPID-201495 affected Cisco
CVRFPID-201604 affected Cisco
CVRFPID-201605 affected Cisco
CVRFPID-201606 affected Cisco
CVRFPID-201607 affected Cisco
CVRFPID-201874 affected Cisco
CVRFPID-201875 affected Cisco
CVRFPID-201876 affected Cisco
CVRFPID-201877 affected Cisco
CVRFPID-201878 affected Cisco
CVRFPID-201879 affected Cisco
CVRFPID-201880 affected Cisco
CVRFPID-201881 affected Cisco
CVRFPID-201882 affected Cisco
CVRFPID-201883 affected Cisco
CVRFPID-201884 affected Cisco
CVRFPID-201885 affected Cisco
CVRFPID-201886 affected Cisco
CVRFPID-201887 affected Cisco
CVRFPID-201888 affected Cisco
CVRFPID-202401 affected Cisco
CVRFPID-202532 affected Cisco
CVRFPID-202539 affected Cisco
CVRFPID-202540 affected Cisco
CVRFPID-202541 affected Cisco
CVRFPID-202542 affected Cisco
CVRFPID-202553 affected Cisco
CVRFPID-202558 affected Cisco
CVRFPID-202683 affected Cisco
CVRFPID-202737 affected Cisco
CVRFPID-202738 affected Cisco
CVRFPID-202761 affected Cisco
CVRFPID-203349 affected Cisco
CVRFPID-203353 affected Cisco
CVRFPID-203403 affected Cisco
CVRFPID-203442 affected Cisco
CVRFPID-203512 affected Cisco
CVRFPID-203607 affected Cisco
CVRFPID-203614 affected Cisco
CVRFPID-203746 affected Cisco
CVRFPID-203755 affected Cisco
CVRFPID-204778 affected Cisco
CVRFPID-205007 affected Cisco
CVRFPID-205071 affected Cisco
CVRFPID-205072 affected Cisco
CVRFPID-205073 affected Cisco
CVRFPID-205074 affected Cisco
CVRFPID-205075 affected Cisco
CVRFPID-205076 affected Cisco
CVRFPID-205077 affected Cisco
CVRFPID-205078 affected Cisco
CVRFPID-205079 affected Cisco
CVRFPID-205080 affected Cisco
CVRFPID-205081 affected Cisco
CVRFPID-205082 affected Cisco
CVRFPID-205083 affected Cisco
CVRFPID-205084 affected Cisco
CVRFPID-205085 affected Cisco
CVRFPID-205086 affected Cisco
CVRFPID-205087 affected Cisco
CVRFPID-205088 affected Cisco
CVRFPID-205089 affected Cisco
CVRFPID-205090 affected Cisco
CVRFPID-205091 affected Cisco
CVRFPID-205092 affected Cisco
CVRFPID-205093 affected Cisco
CVRFPID-2054 affected Cisco
CVRFPID-206159 affected Cisco
CVRFPID-206160 affected Cisco
CVRFPID-206161 affected Cisco
CVRFPID-206162 affected Cisco
CVRFPID-206163 affected Cisco
CVRFPID-206164 affected Cisco
CVRFPID-206165 affected Cisco
CVRFPID-206166 affected Cisco
CVRFPID-206167 affected Cisco
CVRFPID-206168 affected Cisco
CVRFPID-206169 affected Cisco
CVRFPID-206170 affected Cisco
CVRFPID-206172 affected Cisco
CVRFPID-206173 affected Cisco
CVRFPID-206174 affected Cisco
CVRFPID-206175 affected Cisco
CVRFPID-206176 affected Cisco
CVRFPID-206178 affected Cisco
CVRFPID-206180 affected Cisco
CVRFPID-206181 affected Cisco
CVRFPID-206188 affected Cisco
CVRFPID-206189 affected Cisco
CVRFPID-206190 affected Cisco
CVRFPID-206191 affected Cisco
CVRFPID-206192 affected Cisco
CVRFPID-206193 affected Cisco
CVRFPID-206195 affected Cisco
CVRFPID-206196 affected Cisco
CVRFPID-206197 affected Cisco
CVRFPID-206198 affected Cisco
CVRFPID-206200 affected Cisco
CVRFPID-206201 affected Cisco
CVRFPID-206202 affected Cisco
CVRFPID-206203 affected Cisco
CVRFPID-206205 affected Cisco
CVRFPID-206206 affected Cisco
CVRFPID-206208 affected Cisco
CVRFPID-206209 affected Cisco
CVRFPID-206211 affected Cisco
CVRFPID-2074 affected Cisco
CVRFPID-2078 affected Cisco
CVRFPID-209150 affected Cisco
CVRFPID-209582 affected Cisco
CVRFPID-2097 affected Cisco
CVRFPID-211903 affected Cisco
CVRFPID-213561 affected Cisco
CVRFPID-213864 affected Cisco
CVRFPID-220254 affected Cisco
CVRFPID-220301 affected Cisco
CVRFPID-4844 affected Cisco
CVRFPID-5834 affected Cisco
CVRFPID-6407 affected Cisco
CVRFPID-6439 affected Cisco
CVRFPID-7333 affected Cisco
CVRFPID-73608 affected Cisco
CVRFPID-7365 affected Cisco
CVRFPID-7367 affected Cisco
CVRFPID-7500 affected Cisco
CVRFPID-77997 affected Cisco
CVRFPID-8043 affected Cisco
CVRFPID-8046 affected Cisco
CVRFPID-80725 affected Cisco
CVRFPID-88444 affected Cisco
CVRFPID-89523 affected Cisco
CVRFPID-91870 affected Cisco
CVRFPID-92399 affected Cisco
CVRFPID-93036 affected Cisco
CVRFPID-95900 affected Cisco
CVRFPID-95918 affected Cisco
CVRFPID-96277 affected Cisco
CVRFPID-96689 affected Cisco
CVRFPID-96780 affected Cisco
CVRFPID-99257 affected Cisco
Upstream advisory

cisco-sa-20160120-ucsm

Cisco PSIRTEPSS <= 49%2016-01-20

Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability

CVEs:CVE-2015-6435

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112776 affected Cisco
CVRFPID-209304 affected Cisco
Upstream advisory

cisco-sa-20160113-wlc

Cisco PSIRTEPSS <= 49%2016-01-13

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

CVEs:CVE-2015-6314

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-200678 affected Cisco
CVRFPID-202725 affected Cisco
CVRFPID-202728 affected Cisco
CVRFPID-207941 affected Cisco
CVRFPID-210976 affected Cisco
CVRFPID-210977 affected Cisco
CVRFPID-210979 affected Cisco
Upstream advisory

cisco-sa-20160120-d9036

Cisco PSIRTEPSS <= 49%2016-01-20

Cisco Modular Encoding Platform D9036 Software Default Credentials Vulnerability

CVEs:CVE-2015-6412

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-204778 affected Cisco
Upstream advisory

cisco-sa-20160115-asa

Cisco PSIRTEPSS <= 49%2016-01-15

Cisco Adaptive Security Appliance Information Disclosure Vulnerability

CVEs:CVE-2016-1295

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-108073 affected Cisco
CVRFPID-112139 affected Cisco
CVRFPID-115253 affected Cisco
CVRFPID-115254 affected Cisco
CVRFPID-115255 affected Cisco
CVRFPID-115256 affected Cisco
CVRFPID-115264 affected Cisco
CVRFPID-115265 affected Cisco
CVRFPID-115266 affected Cisco
CVRFPID-185251 affected Cisco
CVRFPID-185252 affected Cisco
CVRFPID-185253 affected Cisco
CVRFPID-185254 affected Cisco
CVRFPID-185255 affected Cisco
CVRFPID-191204 affected Cisco
CVRFPID-191205 affected Cisco
CVRFPID-192947 affected Cisco
CVRFPID-195006 affected Cisco
CVRFPID-198563 affected Cisco
CVRFPID-198564 affected Cisco
CVRFPID-202957 affected Cisco
CVRFPID-202958 affected Cisco
CVRFPID-206499 affected Cisco
CVRFPID-206500 affected Cisco
CVRFPID-211053 affected Cisco
Upstream advisory

cisco-sa-20160113-air

Cisco PSIRTEPSS <= 49%2016-01-13

Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability

CVEs:CVE-2015-6336

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190024 affected Cisco
Upstream advisory

cisco-sa-20160128-sbs

Cisco PSIRTEPSS <= 49%2016-01-28

Cisco Small Business 500 Series Switches Denial of Service Vulnerability

CVEs:CVE-2016-1303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-187436 affected Cisco
Upstream advisory

cisco-sa-20160127-sbms

Cisco PSIRTEPSS <= 49%2016-01-27

Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability

CVEs:CVE-2016-1299

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-187435 affected Cisco
Upstream advisory

cisco-sa-20160111-asa

Cisco PSIRTEPSS <= 49%2016-01-11

Cisco Adaptive Security Appliance Non-DCERPC Traffic Bypass Vulnerability

CVEs:CVE-2015-6423

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-206486 affected Cisco
CVRFPID-208301 affected Cisco
CVRFPID-210986 affected Cisco
CVRFPID-211054 affected Cisco
CVRFPID-211055 affected Cisco
CVRFPID-211056 affected Cisco
CVRFPID-212614 affected Cisco
Upstream advisory

cisco-sa-20160115-fmc1

Cisco PSIRTEPSS <= 49%2016-01-15

Cisco FireSIGHT Management Center DOM-Based Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1294

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205007 affected Cisco
Upstream advisory

cisco-sa-20160128-uc

Cisco PSIRTEPSS <= 49%2016-01-28

Cisco Unity Connection User Search Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1304

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-73608 affected Cisco
Upstream advisory

cisco-sa-20160125-api

Cisco PSIRTEPSS <= 49%2016-01-25

Cisco Application Policy Infrastructure Controller Enterprise Module SNMP Hostname Cross-Site Scripting Vulnerability

CVEs:CVE-2015-6337

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209735 affected Cisco
Upstream advisory

cisco-sa-20160127-uc

Cisco PSIRTEPSS <= 49%2016-01-27

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1300

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-73608 affected Cisco
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.