Cisco Security Advisories · January 2016 — Cisco Security Advisories
25 advisories 36 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2016-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20160129-openssl

Cisco PSIRTWeaponized exploit2016-01-29

Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products

CVEs:CVE-2015-3197CVE-2016-0701

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-111803 affected Cisco — —
CVRFPID-112250 affected Cisco — —
CVRFPID-189790 affected Cisco — —
CVRFPID-190702 affected Cisco — —
CVRFPID-192127 affected Cisco — —
CVRFPID-194328 affected Cisco — —
CVRFPID-194833 affected Cisco — —
CVRFPID-198393 affected Cisco — —
CVRFPID-202683 affected Cisco — —
CVRFPID-203051 affected Cisco — —
CVRFPID-203607 affected Cisco — —
CVRFPID-203614 affected Cisco — —
CVRFPID-203755 affected Cisco — —
CVRFPID-205455 affected Cisco — —
CVRFPID-2078 affected Cisco — —
CVRFPID-208962 affected Cisco — —
CVRFPID-209583 affected Cisco — —
CVRFPID-210583 affected Cisco — —
CVRFPID-210610 affected Cisco — —
CVRFPID-210644 affected Cisco — —
CVRFPID-210834 affected Cisco — —
CVRFPID-210837 affected Cisco — —
CVRFPID-210903 affected Cisco — —
CVRFPID-213561 affected Cisco — —
CVRFPID-225817 affected Cisco — —
CVRFPID-4844 affected Cisco — —
CVRFPID-5239 affected Cisco — —
CVRFPID-5940 affected Cisco — —
CVRFPID-6046 affected Cisco — —
CVRFPID-6439 affected Cisco — —
CVRFPID-73608 affected Cisco — —
CVRFPID-7500 affected Cisco — —
CVRFPID-77997 affected Cisco — —
CVRFPID-92631 affected Cisco — —
Upstream advisory

cisco-sa-20160127-ntpd

Cisco PSIRTPoC exploit2016-01-27

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016

CVEs:CVE-2015-7974CVE-2015-7975CVE-2015-7976CVE-2015-7978CVE-2015-7977CVE-2015-7979CVE-2015-8138CVE-2015-8139CVE-2015-8140CVE-2015-8158CVE-2015-7973

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100637 affected Cisco — —
CVRFPID-111580 affected Cisco — —
CVRFPID-111903 affected Cisco — —
CVRFPID-112250 affected Cisco — —
CVRFPID-112457 affected Cisco — —
CVRFPID-112458 affected Cisco — —
CVRFPID-115622 affected Cisco — —
CVRFPID-117634 affected Cisco — —
CVRFPID-184480 affected Cisco — —
CVRFPID-184481 affected Cisco — —
CVRFPID-184512 affected Cisco — —
CVRFPID-184690 affected Cisco — —
CVRFPID-185359 affected Cisco — —
CVRFPID-188426 affected Cisco — —
CVRFPID-188726 affected Cisco — —
CVRFPID-189516 affected Cisco — —
CVRFPID-190324 affected Cisco — —
CVRFPID-190474 affected Cisco — —
CVRFPID-190702 affected Cisco — —
CVRFPID-190707 affected Cisco — —
CVRFPID-191391 affected Cisco — —
CVRFPID-191392 affected Cisco — —
CVRFPID-191393 affected Cisco — —
CVRFPID-191394 affected Cisco — —
CVRFPID-191395 affected Cisco — —
CVRFPID-191396 affected Cisco — —
CVRFPID-191397 affected Cisco — —
CVRFPID-191398 affected Cisco — —
CVRFPID-191399 affected Cisco — —
CVRFPID-191400 affected Cisco — —
CVRFPID-191401 affected Cisco — —
CVRFPID-191402 affected Cisco — —
CVRFPID-191403 affected Cisco — —
CVRFPID-191404 affected Cisco — —
CVRFPID-191405 affected Cisco — —
CVRFPID-191406 affected Cisco — —
CVRFPID-191407 affected Cisco — —
CVRFPID-191408 affected Cisco — —
CVRFPID-191409 affected Cisco — —
CVRFPID-191410 affected Cisco — —
CVRFPID-191411 affected Cisco — —
CVRFPID-191412 affected Cisco — —
CVRFPID-191413 affected Cisco — —
CVRFPID-191414 affected Cisco — —
CVRFPID-191415 affected Cisco — —
CVRFPID-191416 affected Cisco — —
CVRFPID-191417 affected Cisco — —
CVRFPID-191418 affected Cisco — —
CVRFPID-191419 affected Cisco — —
CVRFPID-191420 affected Cisco — —
CVRFPID-191421 affected Cisco — —
CVRFPID-191422 affected Cisco — —
CVRFPID-191423 affected Cisco — —
CVRFPID-191424 affected Cisco — —
CVRFPID-191425 affected Cisco — —
CVRFPID-191426 affected Cisco — —
CVRFPID-191427 affected Cisco — —
CVRFPID-191428 affected Cisco — —
CVRFPID-191429 affected Cisco — —
CVRFPID-191430 affected Cisco — —
CVRFPID-191431 affected Cisco — —
CVRFPID-191432 affected Cisco — —
CVRFPID-191433 affected Cisco — —
CVRFPID-191434 affected Cisco — —
CVRFPID-191435 affected Cisco — —
CVRFPID-191436 affected Cisco — —
CVRFPID-191437 affected Cisco — —
CVRFPID-191438 affected Cisco — —
CVRFPID-191439 affected Cisco — —
CVRFPID-191440 affected Cisco — —
CVRFPID-191441 affected Cisco — —
CVRFPID-191442 affected Cisco — —
CVRFPID-191443 affected Cisco — —
CVRFPID-191444 affected Cisco — —
CVRFPID-191445 affected Cisco — —
CVRFPID-191446 affected Cisco — —
CVRFPID-191447 affected Cisco — —
CVRFPID-191448 affected Cisco — —
CVRFPID-191449 affected Cisco — —
CVRFPID-191450 affected Cisco — —
CVRFPID-191451 affected Cisco — —
CVRFPID-191452 affected Cisco — —
CVRFPID-191453 affected Cisco — —
CVRFPID-191454 affected Cisco — —
CVRFPID-191455 affected Cisco — —
CVRFPID-191456 affected Cisco — —
CVRFPID-191457 affected Cisco — —
CVRFPID-191458 affected Cisco — —
CVRFPID-191459 affected Cisco — —
CVRFPID-191466 affected Cisco — —
CVRFPID-191467 affected Cisco — —
CVRFPID-191468 affected Cisco — —
CVRFPID-191469 affected Cisco — —
CVRFPID-191470 affected Cisco — —
CVRFPID-191471 affected Cisco — —
CVRFPID-191472 affected Cisco — —
CVRFPID-191473 affected Cisco — —
CVRFPID-191474 affected Cisco — —
CVRFPID-191475 affected Cisco — —
CVRFPID-191476 affected Cisco — —
CVRFPID-191477 affected Cisco — —
CVRFPID-191478 affected Cisco — —
CVRFPID-191479 affected Cisco — —
CVRFPID-191480 affected Cisco — —
CVRFPID-191481 affected Cisco — —
CVRFPID-191482 affected Cisco — —
CVRFPID-191483 affected Cisco — —
CVRFPID-191484 affected Cisco — —
CVRFPID-191485 affected Cisco — —
CVRFPID-191687 affected Cisco — —
CVRFPID-192324 affected Cisco — —
CVRFPID-192563 affected Cisco — —
CVRFPID-192564 affected Cisco — —
CVRFPID-192918 affected Cisco — —
CVRFPID-193469 affected Cisco — —
CVRFPID-194456 affected Cisco — —
CVRFPID-194693 affected Cisco — —
CVRFPID-194694 affected Cisco — —
CVRFPID-194730 affected Cisco — —
CVRFPID-194731 affected Cisco — —
CVRFPID-194732 affected Cisco — —
CVRFPID-194735 affected Cisco — —
CVRFPID-194736 affected Cisco — —
CVRFPID-194737 affected Cisco — —
CVRFPID-194833 affected Cisco — —
CVRFPID-194842 affected Cisco — —
CVRFPID-194843 affected Cisco — —
CVRFPID-195223 affected Cisco — —
CVRFPID-195235 affected Cisco — —
CVRFPID-196216 affected Cisco — —
CVRFPID-196218 affected Cisco — —
CVRFPID-196220 affected Cisco — —
CVRFPID-196221 affected Cisco — —
CVRFPID-196222 affected Cisco — —
CVRFPID-196223 affected Cisco — —
CVRFPID-196224 affected Cisco — —
CVRFPID-196225 affected Cisco — —
CVRFPID-196226 affected Cisco — —
CVRFPID-196227 affected Cisco — —
CVRFPID-196228 affected Cisco — —
CVRFPID-196230 affected Cisco — —
CVRFPID-196231 affected Cisco — —
CVRFPID-196287 affected Cisco — —
CVRFPID-196288 affected Cisco — —
CVRFPID-196607 affected Cisco — —
CVRFPID-196608 affected Cisco — —
CVRFPID-196609 affected Cisco — —
CVRFPID-196610 affected Cisco — —
CVRFPID-196611 affected Cisco — —
CVRFPID-196612 affected Cisco — —
CVRFPID-196613 affected Cisco — —
CVRFPID-196614 affected Cisco — —
CVRFPID-196615 affected Cisco — —
CVRFPID-196616 affected Cisco — —
CVRFPID-196617 affected Cisco — —
CVRFPID-196925 affected Cisco — —
CVRFPID-197112 affected Cisco — —
CVRFPID-197145 affected Cisco — —
CVRFPID-197708 affected Cisco — —
CVRFPID-198123 affected Cisco — —
CVRFPID-198124 affected Cisco — —
CVRFPID-198125 affected Cisco — —
CVRFPID-198393 affected Cisco — —
CVRFPID-198535 affected Cisco — —
CVRFPID-198539 affected Cisco — —
CVRFPID-200768 affected Cisco — —
CVRFPID-200770 affected Cisco — —
CVRFPID-200771 affected Cisco — —
CVRFPID-201495 affected Cisco — —
CVRFPID-201604 affected Cisco — —
CVRFPID-201605 affected Cisco — —
CVRFPID-201606 affected Cisco — —
CVRFPID-201607 affected Cisco — —
CVRFPID-201874 affected Cisco — —
CVRFPID-201875 affected Cisco — —
CVRFPID-201876 affected Cisco — —
CVRFPID-201877 affected Cisco — —
CVRFPID-201878 affected Cisco — —
CVRFPID-201879 affected Cisco — —
CVRFPID-201880 affected Cisco — —
CVRFPID-201881 affected Cisco — —
CVRFPID-201882 affected Cisco — —
CVRFPID-201883 affected Cisco — —
CVRFPID-201884 affected Cisco — —
CVRFPID-201885 affected Cisco — —
CVRFPID-201886 affected Cisco — —
CVRFPID-201887 affected Cisco — —
CVRFPID-201888 affected Cisco — —
CVRFPID-202401 affected Cisco — —
CVRFPID-202532 affected Cisco — —
CVRFPID-202539 affected Cisco — —
CVRFPID-202540 affected Cisco — —
CVRFPID-202541 affected Cisco — —
CVRFPID-202542 affected Cisco — —
CVRFPID-202553 affected Cisco — —
CVRFPID-202558 affected Cisco — —
CVRFPID-202683 affected Cisco — —
CVRFPID-202737 affected Cisco — —
CVRFPID-202738 affected Cisco — —
CVRFPID-202761 affected Cisco — —
CVRFPID-203349 affected Cisco — —
CVRFPID-203353 affected Cisco — —
CVRFPID-203403 affected Cisco — —
CVRFPID-203442 affected Cisco — —
CVRFPID-203512 affected Cisco — —
CVRFPID-203607 affected Cisco — —
CVRFPID-203614 affected Cisco — —
CVRFPID-203746 affected Cisco — —
CVRFPID-203755 affected Cisco — —
CVRFPID-204778 affected Cisco — —
CVRFPID-205007 affected Cisco — —
CVRFPID-205071 affected Cisco — —
CVRFPID-205072 affected Cisco — —
CVRFPID-205073 affected Cisco — —
CVRFPID-205074 affected Cisco — —
CVRFPID-205075 affected Cisco — —
CVRFPID-205076 affected Cisco — —
CVRFPID-205077 affected Cisco — —
CVRFPID-205078 affected Cisco — —
CVRFPID-205079 affected Cisco — —
CVRFPID-205080 affected Cisco — —
CVRFPID-205081 affected Cisco — —
CVRFPID-205082 affected Cisco — —
CVRFPID-205083 affected Cisco — —
CVRFPID-205084 affected Cisco — —
CVRFPID-205085 affected Cisco — —
CVRFPID-205086 affected Cisco — —
CVRFPID-205087 affected Cisco — —
CVRFPID-205088 affected Cisco — —
CVRFPID-205089 affected Cisco — —
CVRFPID-205090 affected Cisco — —
CVRFPID-205091 affected Cisco — —
CVRFPID-205092 affected Cisco — —
CVRFPID-205093 affected Cisco — —
CVRFPID-2054 affected Cisco — —
CVRFPID-206159 affected Cisco — —
CVRFPID-206160 affected Cisco — —
CVRFPID-206161 affected Cisco — —
CVRFPID-206162 affected Cisco — —
CVRFPID-206163 affected Cisco — —
CVRFPID-206164 affected Cisco — —
CVRFPID-206165 affected Cisco — —
CVRFPID-206166 affected Cisco — —
CVRFPID-206167 affected Cisco — —
CVRFPID-206168 affected Cisco — —
CVRFPID-206169 affected Cisco — —
CVRFPID-206170 affected Cisco — —
CVRFPID-206172 affected Cisco — —
CVRFPID-206173 affected Cisco — —
CVRFPID-206174 affected Cisco — —
CVRFPID-206175 affected Cisco — —
CVRFPID-206176 affected Cisco — —
CVRFPID-206178 affected Cisco — —
CVRFPID-206180 affected Cisco — —
CVRFPID-206181 affected Cisco — —
CVRFPID-206188 affected Cisco — —
CVRFPID-206189 affected Cisco — —
CVRFPID-206190 affected Cisco — —
CVRFPID-206191 affected Cisco — —
CVRFPID-206192 affected Cisco — —
CVRFPID-206193 affected Cisco — —
CVRFPID-206195 affected Cisco — —
CVRFPID-206196 affected Cisco — —
CVRFPID-206197 affected Cisco — —
CVRFPID-206198 affected Cisco — —
CVRFPID-206200 affected Cisco — —
CVRFPID-206201 affected Cisco — —
CVRFPID-206202 affected Cisco — —
CVRFPID-206203 affected Cisco — —
CVRFPID-206205 affected Cisco — —
CVRFPID-206206 affected Cisco — —
CVRFPID-206208 affected Cisco — —
CVRFPID-206209 affected Cisco — —
CVRFPID-206211 affected Cisco — —
CVRFPID-2074 affected Cisco — —
CVRFPID-2078 affected Cisco — —
CVRFPID-209150 affected Cisco — —
CVRFPID-209582 affected Cisco — —
CVRFPID-2097 affected Cisco — —
CVRFPID-211903 affected Cisco — —
CVRFPID-213561 affected Cisco — —
CVRFPID-213864 affected Cisco — —
CVRFPID-220254 affected Cisco — —
CVRFPID-220301 affected Cisco — —
CVRFPID-4844 affected Cisco — —
CVRFPID-5834 affected Cisco — —
CVRFPID-6407 affected Cisco — —
CVRFPID-6439 affected Cisco — —
CVRFPID-7333 affected Cisco — —
CVRFPID-73608 affected Cisco — —
CVRFPID-7365 affected Cisco — —
CVRFPID-7367 affected Cisco — —
CVRFPID-7500 affected Cisco — —
CVRFPID-77997 affected Cisco — —
CVRFPID-8043 affected Cisco — —
CVRFPID-8046 affected Cisco — —
CVRFPID-80725 affected Cisco — —
CVRFPID-88444 affected Cisco — —
CVRFPID-89523 affected Cisco — —
CVRFPID-91870 affected Cisco — —
CVRFPID-92399 affected Cisco — —
CVRFPID-93036 affected Cisco — —
CVRFPID-95900 affected Cisco — —
CVRFPID-95918 affected Cisco — —
CVRFPID-96277 affected Cisco — —
CVRFPID-96689 affected Cisco — —
CVRFPID-96780 affected Cisco — —
CVRFPID-99257 affected Cisco — —
Upstream advisory

cisco-sa-20160120-ucsm

Cisco PSIRTEPSS <= 49%2016-01-20

Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability

CVEs:CVE-2015-6435

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112776 affected Cisco — —
CVRFPID-209304 affected Cisco — —
Upstream advisory

cisco-sa-20160113-wlc

Cisco PSIRTEPSS <= 49%2016-01-13

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

CVEs:CVE-2015-6314

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-200678 affected Cisco — —
CVRFPID-202725 affected Cisco — —
CVRFPID-202728 affected Cisco — —
CVRFPID-207941 affected Cisco — —
CVRFPID-210976 affected Cisco — —
CVRFPID-210977 affected Cisco — —
CVRFPID-210979 affected Cisco — —
Upstream advisory

cisco-sa-20160120-d9036

Cisco PSIRTEPSS <= 49%2016-01-20

Cisco Modular Encoding Platform D9036 Software Default Credentials Vulnerability

CVEs:CVE-2015-6412

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-204778 affected Cisco — —
Upstream advisory

cisco-sa-20160115-asa

Cisco PSIRTEPSS <= 49%2016-01-15

Cisco Adaptive Security Appliance Information Disclosure Vulnerability

CVEs:CVE-2016-1295

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-108073 affected Cisco — —
CVRFPID-112139 affected Cisco — —
CVRFPID-115253 affected Cisco — —
CVRFPID-115254 affected Cisco — —
CVRFPID-115255 affected Cisco — —
CVRFPID-115256 affected Cisco — —
CVRFPID-115264 affected Cisco — —
CVRFPID-115265 affected Cisco — —
CVRFPID-115266 affected Cisco — —
CVRFPID-185251 affected Cisco — —
CVRFPID-185252 affected Cisco — —
CVRFPID-185253 affected Cisco — —
CVRFPID-185254 affected Cisco — —
CVRFPID-185255 affected Cisco — —
CVRFPID-191204 affected Cisco — —
CVRFPID-191205 affected Cisco — —
CVRFPID-192947 affected Cisco — —
CVRFPID-195006 affected Cisco — —
CVRFPID-198563 affected Cisco — —
CVRFPID-198564 affected Cisco — —
CVRFPID-202957 affected Cisco — —
CVRFPID-202958 affected Cisco — —
CVRFPID-206499 affected Cisco — —
CVRFPID-206500 affected Cisco — —
CVRFPID-211053 affected Cisco — —
Upstream advisory

cisco-sa-20160113-air

Cisco PSIRTEPSS <= 49%2016-01-13

Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability

CVEs:CVE-2015-6336

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190024 affected Cisco — —
Upstream advisory

cisco-sa-20160128-sbs

Cisco PSIRTEPSS <= 49%2016-01-28

Cisco Small Business 500 Series Switches Denial of Service Vulnerability

CVEs:CVE-2016-1303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-187436 affected Cisco — —
Upstream advisory

cisco-sa-20160127-sbms

Cisco PSIRTEPSS <= 49%2016-01-27

Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability

CVEs:CVE-2016-1299

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-187435 affected Cisco — —
Upstream advisory

cisco-sa-20160111-asa

Cisco PSIRTEPSS <= 49%2016-01-11

Cisco Adaptive Security Appliance Non-DCERPC Traffic Bypass Vulnerability

CVEs:CVE-2015-6423

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-206486 affected Cisco — —
CVRFPID-208301 affected Cisco — —
CVRFPID-210986 affected Cisco — —
CVRFPID-211054 affected Cisco — —
CVRFPID-211055 affected Cisco — —
CVRFPID-211056 affected Cisco — —
CVRFPID-212614 affected Cisco — —
Upstream advisory

cisco-sa-20160115-fmc1

Cisco PSIRTEPSS <= 49%2016-01-15

Cisco FireSIGHT Management Center DOM-Based Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1294

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205007 affected Cisco — —
Upstream advisory

cisco-sa-20160128-uc

Cisco PSIRTEPSS <= 49%2016-01-28

Cisco Unity Connection User Search Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1304

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-73608 affected Cisco — —
Upstream advisory

cisco-sa-20160125-api

Cisco PSIRTEPSS <= 49%2016-01-25

Cisco Application Policy Infrastructure Controller Enterprise Module SNMP Hostname Cross-Site Scripting Vulnerability

CVEs:CVE-2015-6337

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209735 affected Cisco — —
Upstream advisory

cisco-sa-20160127-uc

Cisco PSIRTEPSS <= 49%2016-01-27

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1300

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-73608 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.