Cisco Security Advisories · February 2016 — Cisco Security Advisories
31 advisories 31 CVEs 1 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2016-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20160218-glibc

Cisco PSIRTExploitedVulnCheck KEV listed2016-02-18

Vulnerability in GNU glibc Affecting Cisco Products: February 2016

CVEs:CVE-2015-7547

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-111803 affected Cisco — —
CVRFPID-111903 affected Cisco — —
CVRFPID-112250 affected Cisco — —
CVRFPID-185359 affected Cisco — —
CVRFPID-188989 affected Cisco — —
CVRFPID-190474 affected Cisco — —
CVRFPID-190702 affected Cisco — —
CVRFPID-192280 affected Cisco — —
CVRFPID-193199 affected Cisco — —
CVRFPID-193469 affected Cisco — —
CVRFPID-194456 affected Cisco — —
CVRFPID-194833 affected Cisco — —
CVRFPID-195842 affected Cisco — —
CVRFPID-195936 affected Cisco — —
CVRFPID-197112 affected Cisco — —
CVRFPID-197592 affected Cisco — —
CVRFPID-197708 affected Cisco — —
CVRFPID-198393 affected Cisco — —
CVRFPID-202401 affected Cisco — —
CVRFPID-202683 affected Cisco — —
CVRFPID-203051 affected Cisco — —
CVRFPID-203403 affected Cisco — —
CVRFPID-203442 affected Cisco — —
CVRFPID-203607 affected Cisco — —
CVRFPID-203614 affected Cisco — —
CVRFPID-203724 affected Cisco — —
CVRFPID-203755 affected Cisco — —
CVRFPID-205007 affected Cisco — —
CVRFPID-205455 affected Cisco — —
CVRFPID-2078 affected Cisco — —
CVRFPID-209735 affected Cisco — —
CVRFPID-210593 affected Cisco — —
CVRFPID-210717 affected Cisco — —
CVRFPID-210824 affected Cisco — —
CVRFPID-211748 affected Cisco — —
CVRFPID-213561 affected Cisco — —
CVRFPID-213864 affected Cisco — —
CVRFPID-220254 affected Cisco — —
CVRFPID-220301 affected Cisco — —
CVRFPID-223093 affected Cisco — —
CVRFPID-4844 affected Cisco — —
CVRFPID-5239 affected Cisco — —
CVRFPID-73608 affected Cisco — —
CVRFPID-7368 affected Cisco — —
CVRFPID-77997 affected Cisco — —
CVRFPID-92631 affected Cisco — —
CVRFPID-93036 affected Cisco — —
CVRFPID-95900 affected Cisco — —
Upstream advisory

cisco-sa-20160210-asa-ike

Cisco PSIRTWeaponized exploit2016-02-10

Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

CVEs:CVE-2016-1287

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco — —
CVRFPID-108069 affected Cisco — —
CVRFPID-108072 affected Cisco — —
CVRFPID-108073 affected Cisco — —
CVRFPID-108074 affected Cisco — —
CVRFPID-111872 affected Cisco — —
CVRFPID-112136 affected Cisco — —
CVRFPID-112138 affected Cisco — —
CVRFPID-112139 affected Cisco — —
CVRFPID-112140 affected Cisco — —
CVRFPID-112800 affected Cisco — —
CVRFPID-115208 affected Cisco — —
CVRFPID-115209 affected Cisco — —
CVRFPID-115210 affected Cisco — —
CVRFPID-115211 affected Cisco — —
CVRFPID-115212 affected Cisco — —
CVRFPID-115213 affected Cisco — —
CVRFPID-115214 affected Cisco — —
CVRFPID-115215 affected Cisco — —
CVRFPID-115216 affected Cisco — —
CVRFPID-115217 affected Cisco — —
CVRFPID-115218 affected Cisco — —
CVRFPID-115219 affected Cisco — —
CVRFPID-115220 affected Cisco — —
CVRFPID-115221 affected Cisco — —
CVRFPID-115222 affected Cisco — —
CVRFPID-115223 affected Cisco — —
CVRFPID-115224 affected Cisco — —
CVRFPID-115225 affected Cisco — —
CVRFPID-115241 affected Cisco — —
CVRFPID-115242 affected Cisco — —
CVRFPID-115243 affected Cisco — —
CVRFPID-115244 affected Cisco — —
CVRFPID-115245 affected Cisco — —
CVRFPID-115246 affected Cisco — —
CVRFPID-115247 affected Cisco — —
CVRFPID-115248 affected Cisco — —
CVRFPID-115249 affected Cisco — —
CVRFPID-115250 affected Cisco — —
CVRFPID-115251 affected Cisco — —
CVRFPID-115252 affected Cisco — —
CVRFPID-115253 affected Cisco — —
CVRFPID-115254 affected Cisco — —
CVRFPID-115255 affected Cisco — —
CVRFPID-115256 affected Cisco — —
CVRFPID-115257 affected Cisco — —
CVRFPID-115260 affected Cisco — —
CVRFPID-115261 affected Cisco — —
CVRFPID-115262 affected Cisco — —
CVRFPID-115263 affected Cisco — —
CVRFPID-115264 affected Cisco — —
CVRFPID-115265 affected Cisco — —
CVRFPID-115266 affected Cisco — —
CVRFPID-115268 affected Cisco — —
CVRFPID-115269 affected Cisco — —
CVRFPID-115270 affected Cisco — —
CVRFPID-115276 affected Cisco — —
CVRFPID-116857 affected Cisco — —
CVRFPID-185176 affected Cisco — —
CVRFPID-185177 affected Cisco — —
CVRFPID-185179 affected Cisco — —
CVRFPID-185180 affected Cisco — —
CVRFPID-185251 affected Cisco — —
CVRFPID-185252 affected Cisco — —
CVRFPID-185253 affected Cisco — —
CVRFPID-185254 affected Cisco — —
CVRFPID-185255 affected Cisco — —
CVRFPID-185256 affected Cisco — —
CVRFPID-185257 affected Cisco — —
CVRFPID-185260 affected Cisco — —
CVRFPID-188865 affected Cisco — —
CVRFPID-188866 affected Cisco — —
CVRFPID-188867 affected Cisco — —
CVRFPID-191201 affected Cisco — —
CVRFPID-191202 affected Cisco — —
CVRFPID-191203 affected Cisco — —
CVRFPID-191204 affected Cisco — —
CVRFPID-191205 affected Cisco — —
CVRFPID-191206 affected Cisco — —
CVRFPID-191207 affected Cisco — —
CVRFPID-191208 affected Cisco — —
CVRFPID-191210 affected Cisco — —
CVRFPID-191211 affected Cisco — —
CVRFPID-191212 affected Cisco — —
CVRFPID-191213 affected Cisco — —
CVRFPID-191214 affected Cisco — —
CVRFPID-192947 affected Cisco — —
CVRFPID-194998 affected Cisco — —
CVRFPID-194999 affected Cisco — —
CVRFPID-195000 affected Cisco — —
CVRFPID-195001 affected Cisco — —
CVRFPID-195002 affected Cisco — —
CVRFPID-195003 affected Cisco — —
CVRFPID-195004 affected Cisco — —
CVRFPID-195005 affected Cisco — —
CVRFPID-195006 affected Cisco — —
CVRFPID-195007 affected Cisco — —
CVRFPID-195008 affected Cisco — —
CVRFPID-195009 affected Cisco — —
CVRFPID-198551 affected Cisco — —
CVRFPID-198552 affected Cisco — —
CVRFPID-198553 affected Cisco — —
CVRFPID-198554 affected Cisco — —
CVRFPID-198555 affected Cisco — —
CVRFPID-198556 affected Cisco — —
CVRFPID-198557 affected Cisco — —
CVRFPID-198558 affected Cisco — —
CVRFPID-198559 affected Cisco — —
CVRFPID-198560 affected Cisco — —
CVRFPID-198561 affected Cisco — —
CVRFPID-198562 affected Cisco — —
CVRFPID-198563 affected Cisco — —
CVRFPID-198564 affected Cisco — —
CVRFPID-198565 affected Cisco — —
CVRFPID-198566 affected Cisco — —
CVRFPID-202938 affected Cisco — —
CVRFPID-202940 affected Cisco — —
CVRFPID-202941 affected Cisco — —
CVRFPID-202942 affected Cisco — —
CVRFPID-202943 affected Cisco — —
CVRFPID-202944 affected Cisco — —
CVRFPID-202945 affected Cisco — —
CVRFPID-202946 affected Cisco — —
CVRFPID-202947 affected Cisco — —
CVRFPID-202948 affected Cisco — —
CVRFPID-202949 affected Cisco — —
CVRFPID-202950 affected Cisco — —
CVRFPID-202951 affected Cisco — —
CVRFPID-202952 affected Cisco — —
CVRFPID-202953 affected Cisco — —
CVRFPID-202954 affected Cisco — —
CVRFPID-202955 affected Cisco — —
CVRFPID-202956 affected Cisco — —
CVRFPID-202957 affected Cisco — —
CVRFPID-202958 affected Cisco — —
CVRFPID-202959 affected Cisco — —
CVRFPID-202960 affected Cisco — —
CVRFPID-204544 affected Cisco — —
CVRFPID-206218 affected Cisco — —
CVRFPID-206486 affected Cisco — —
CVRFPID-206487 affected Cisco — —
CVRFPID-206488 affected Cisco — —
CVRFPID-206489 affected Cisco — —
CVRFPID-206490 affected Cisco — —
CVRFPID-206491 affected Cisco — —
CVRFPID-206492 affected Cisco — —
CVRFPID-206493 affected Cisco — —
CVRFPID-206494 affected Cisco — —
CVRFPID-206495 affected Cisco — —
CVRFPID-206496 affected Cisco — —
CVRFPID-206497 affected Cisco — —
CVRFPID-206498 affected Cisco — —
CVRFPID-206499 affected Cisco — —
CVRFPID-206500 affected Cisco — —
CVRFPID-206501 affected Cisco — —
CVRFPID-206502 affected Cisco — —
CVRFPID-206503 affected Cisco — —
CVRFPID-206504 affected Cisco — —
CVRFPID-206505 affected Cisco — —
CVRFPID-207900 affected Cisco — —
CVRFPID-207903 affected Cisco — —
CVRFPID-207904 affected Cisco — —
CVRFPID-207905 affected Cisco — —
CVRFPID-208301 affected Cisco — —
CVRFPID-210982 affected Cisco — —
CVRFPID-210983 affected Cisco — —
CVRFPID-210984 affected Cisco — —
CVRFPID-210985 affected Cisco — —
CVRFPID-210986 affected Cisco — —
CVRFPID-210988 affected Cisco — —
CVRFPID-211050 affected Cisco — —
CVRFPID-211051 affected Cisco — —
CVRFPID-211052 affected Cisco — —
CVRFPID-211053 affected Cisco — —
CVRFPID-211054 affected Cisco — —
CVRFPID-211055 affected Cisco — —
CVRFPID-211056 affected Cisco — —
CVRFPID-211057 affected Cisco — —
CVRFPID-211058 affected Cisco — —
CVRFPID-211059 affected Cisco — —
CVRFPID-211060 affected Cisco — —
CVRFPID-212614 affected Cisco — —
CVRFPID-212704 affected Cisco — —
CVRFPID-212705 affected Cisco — —
CVRFPID-212706 affected Cisco — —
CVRFPID-212707 affected Cisco — —
CVRFPID-212708 affected Cisco — —
CVRFPID-70760 affected Cisco — —
CVRFPID-70762 affected Cisco — —
CVRFPID-70763 affected Cisco — —
CVRFPID-70764 affected Cisco — —
CVRFPID-91011 affected Cisco — —
CVRFPID-91012 affected Cisco — —
CVRFPID-91013 affected Cisco — —
CVRFPID-91089 affected Cisco — —
CVRFPID-91090 affected Cisco — —
CVRFPID-97260 affected Cisco — —
CVRFPID-97261 affected Cisco — —
CVRFPID-99994 affected Cisco — —
CVRFPID-99996 affected Cisco — —
CVRFPID-99997 affected Cisco — —
Upstream advisory

cisco-sa-20160210-sp3

Cisco PSIRTPoC exploit2016-02-10

Cisco Spark Representational State Transfer Interface Denial of Service Vulnerability

CVEs:CVE-2016-1324

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-210403 affected Cisco — —
Upstream advisory

cisco-sa-20160210-sp1

Cisco PSIRTPoC exploit2016-02-10

Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability

CVEs:CVE-2016-1322

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-210403 affected Cisco — —
Upstream advisory

cisco-sa-20160224-fmc

Cisco PSIRTPoC exploit2016-02-24

Cisco FirePOWER Management Center Unauthenticated Information Disclosure Vulnerability

CVEs:CVE-2016-1342

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-212164 affected Cisco — —
CVRFPID-212168 affected Cisco — —
CVRFPID-212170 affected Cisco — —
CVRFPID-212171 affected Cisco — —
CVRFPID-213663 affected Cisco — —
CVRFPID-213664 affected Cisco — —
CVRFPID-213665 affected Cisco — —
CVRFPID-213666 affected Cisco — —
CVRFPID-213667 affected Cisco — —
CVRFPID-213668 affected Cisco — —
CVRFPID-213670 affected Cisco — —
CVRFPID-213671 affected Cisco — —
CVRFPID-213672 affected Cisco — —
CVRFPID-213673 affected Cisco — —
CVRFPID-213674 affected Cisco — —
CVRFPID-213675 affected Cisco — —
CVRFPID-213676 affected Cisco — —
Upstream advisory

cisco-sa-20160210-sp2

Cisco PSIRTPoC exploit2016-02-10

Cisco Spark Representational State Transfer Interface Information Disclosure Vulnerability

CVEs:CVE-2016-1323

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-210403 affected Cisco — —
Upstream advisory

cisco-sa-20160209-pcp

Cisco PSIRTPoC exploit2016-02-09

Cisco Prime Collaboration Provisioning Local Privilege Escalation Vulnerability

CVEs:CVE-2016-1320

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189516 affected Cisco — —
Upstream advisory

cisco-sa-20160218-asr

Cisco PSIRTEPSS <= 49%2016-02-18

Cisco ASR 5000 Series StarOS SSH Subsystem Privilege Escalation Vulnerability

CVEs:CVE-2016-1335

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193199 affected Cisco — —
Upstream advisory

cisco-sa-20160224-ace

Cisco PSIRTEPSS <= 49%2016-02-24

Cisco ACE 4710 Application Control Engine Command Injection Vulnerability

CVEs:CVE-2016-1297

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-80725 affected Cisco — —
Upstream advisory

cisco-sa-20160203-prsm

Cisco PSIRTEPSS <= 49%2016-02-03

Cisco ASA-CX and Cisco Prime Security Manager Privilege Escalation Vulnerability

CVEs:CVE-2016-1301

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-184512 affected Cisco — —
CVRFPID-184690 affected Cisco — —
Upstream advisory

cisco-sa-20160203-apic

Cisco PSIRTEPSS <= 49%2016-02-03

Cisco Application Policy Infrastructure Controller Access Control Vulnerability

CVEs:CVE-2016-1302

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-202553 affected Cisco — —
CVRFPID-80720 affected Cisco — —
Upstream advisory

cisco-sa-20160226-vds-is

Cisco PSIRTEPSS <= 49%2016-02-29

Cisco Videoscape Distribution Suite for Internet Streaming TCP Session Handling Denial of Service Vulnerability

CVEs:CVE-2016-1353

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193210 affected Cisco — —
Upstream advisory

cisco-sa-20160216-grid

Cisco PSIRTEPSS <= 49%2016-02-16

Cisco 1000 Series Connected Grid Routers SNMP BRIDGE MIB Denial of Service Vulnerability

CVEs:CVE-2016-1333

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-2097 affected Cisco — —
Upstream advisory

cisco-sa-20160208-vcs

Cisco PSIRTEPSS <= 49%2016-02-08

Cisco Video Communications Server Information Disclosure Vulnerability

CVEs:CVE-2016-1316

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112250 affected Cisco — —
Upstream advisory

cisco-sa-20160211-esaamp

Cisco PSIRTEPSS <= 49%2016-02-11

Cisco Advanced Malware Protection and Email Security Appliance Proxy Engine Security Bypass Vulnerability

CVEs:CVE-2016-1315

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189790 affected Cisco — —
Upstream advisory

cisco-sa-20160216-wap

Cisco PSIRTEPSS <= 49%2016-02-16

Cisco Small Business 500 Series Wireless Access Point Configuration Modification Vulnerability

CVEs:CVE-2016-1334

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-183614 affected Cisco — —
Upstream advisory

cisco-sa-20160202-fducce

Cisco PSIRTEPSS <= 49%2016-02-02

Cisco Finesse Desktop and Cisco Unified Contact Center Express Applications XMPP Unauthorized Access Vulnerability

CVEs:CVE-2016-1307

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193469 affected Cisco — —
CVRFPID-92631 affected Cisco — —
Upstream advisory

cisco-sa-20160223-nx2000

Cisco PSIRTEPSS <= 49%2016-02-23

Cisco Nexus 2000 Series Fabric Extender Software Default Credential Vulnerability

CVEs:CVE-2016-1341

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-201885 affected Cisco — —
CVRFPID-213631 affected Cisco — —
Upstream advisory

cisco-sa-20160208-apic

Cisco PSIRTEPSS <= 49%2016-02-08

Cisco Application Policy Infrastructure Controller Enterprise Module Web Framework Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1318

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209735 affected Cisco — —
Upstream advisory

cisco-sa-20160203-uc

Cisco PSIRTEPSS <= 49%2016-02-03

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1310

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-73608 affected Cisco — —
Upstream advisory

cisco-sa-20160203-jgs

Cisco PSIRTEPSS <= 49%2016-02-03

Cisco Jabber Guest Server HTTP Web-Based Management Interface Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1311

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-203403 affected Cisco — —
Upstream advisory

cisco-sa-20160202-wms

Cisco PSIRTEPSS <= 49%2016-02-02

Cisco WebEx Meetings Server Multiple Cross-Site Scripting Vulnerabilities

CVEs:CVE-2016-1309

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190702 affected Cisco — —
Upstream advisory

cisco-sa-20160201-apic-em

Cisco PSIRTEPSS <= 49%2016-02-01

Cisco Application Policy Infrastructure Controller Enterprise Module Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1305

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209735 affected Cisco — —
Upstream advisory

cisco-sa-20160212-usc

Cisco PSIRTEPSS <= 49%2016-02-12

Cisco Universal Small Cell Devices Unauthorized Firmware Retrieval Vulnerability

CVEs:CVE-2016-1321

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-201021 affected Cisco — —
Upstream advisory

cisco-sa-20160208-ucm

Cisco PSIRTEPSS <= 49%2016-02-08

Cisco Unified Products Information Disclosure Vulnerability

CVEs:CVE-2016-1319

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189784 affected Cisco — —
CVRFPID-73608 affected Cisco — —
CVRFPID-88444 affected Cisco — —
CVRFPID-92631 affected Cisco — —
Upstream advisory

cisco-sa-20160215-ie2000

Cisco PSIRTEPSS <= 49%2016-02-15

Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches Denial of Service Vulnerability

CVEs:CVE-2016-1330

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-2097 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.