Cisco Security Advisories · July 2016 — Cisco Security Advisories
22 advisories 22 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2016-07. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20160721-asn1c

Cisco PSIRTPoC exploit2016-07-21

Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products

CVEs:CVE-2016-5080

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193199 affected Cisco — —
CVRFPID-217771 affected Cisco — —
Upstream advisory

cisco-sa-20160706-pi

Cisco PSIRTEPSS <= 49%2016-07-06

Cisco Prime Infrastructure Administrative Web Interface HTML Injection Vulnerability

CVEs:CVE-2016-1442

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190324 affected Cisco — —
Upstream advisory

cisco-sa-20160714-wms

Cisco PSIRTEPSS <= 49%2016-07-14

Cisco WebEx Meetings Server Administrator Interface SQL Injection Vulnerability

CVEs:CVE-2016-1446

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190702 affected Cisco — —
Upstream advisory

cisco-sa-20160714-wms1

Cisco PSIRTEPSS <= 49%2016-07-14

Cisco WebEx Meetings Server Administrator Interface Reflected Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1447

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190702 affected Cisco — —
Upstream advisory

cisco-sa-20160715-bgp

Cisco PSIRTEPSS <= 49%2016-07-15

Cisco IOS and IOS XE Software Border Gateway Protocol Message Processing Denial of Service Vulnerability

CVEs:CVE-2016-1459

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-206175 affected Cisco — —
CVRFPID-206178 affected Cisco — —
CVRFPID-206181 affected Cisco — —
CVRFPID-206191 affected Cisco — —
CVRFPID-206192 affected Cisco — —
CVRFPID-206193 affected Cisco — —
CVRFPID-2097 affected Cisco — —
CVRFPID-210078 affected Cisco — —
CVRFPID-212268 affected Cisco — —
CVRFPID-212411 affected Cisco — —
CVRFPID-212412 affected Cisco — —
CVRFPID-213475 affected Cisco — —
CVRFPID-213477 affected Cisco — —
CVRFPID-213478 affected Cisco — —
CVRFPID-213557 affected Cisco — —
CVRFPID-213700 affected Cisco — —
CVRFPID-213776 affected Cisco — —
CVRFPID-213778 affected Cisco — —
CVRFPID-213779 affected Cisco — —
CVRFPID-217234 affected Cisco — —
Upstream advisory

cisco-sa-20160711-asa

Cisco PSIRTEPSS <= 49%2016-07-11

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability

CVEs:CVE-2016-1445

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-108069 affected Cisco — —
CVRFPID-108072 affected Cisco — —
CVRFPID-108073 affected Cisco — —
CVRFPID-108074 affected Cisco — —
CVRFPID-112136 affected Cisco — —
CVRFPID-112138 affected Cisco — —
CVRFPID-112139 affected Cisco — —
CVRFPID-112140 affected Cisco — —
CVRFPID-112800 affected Cisco — —
CVRFPID-115241 affected Cisco — —
CVRFPID-115242 affected Cisco — —
CVRFPID-115243 affected Cisco — —
CVRFPID-115244 affected Cisco — —
CVRFPID-115245 affected Cisco — —
CVRFPID-115246 affected Cisco — —
CVRFPID-115247 affected Cisco — —
CVRFPID-115248 affected Cisco — —
CVRFPID-115249 affected Cisco — —
CVRFPID-115250 affected Cisco — —
CVRFPID-115251 affected Cisco — —
CVRFPID-115252 affected Cisco — —
CVRFPID-115253 affected Cisco — —
CVRFPID-115254 affected Cisco — —
CVRFPID-115255 affected Cisco — —
CVRFPID-115256 affected Cisco — —
CVRFPID-115260 affected Cisco — —
CVRFPID-115261 affected Cisco — —
CVRFPID-115262 affected Cisco — —
CVRFPID-115263 affected Cisco — —
CVRFPID-115264 affected Cisco — —
CVRFPID-115265 affected Cisco — —
CVRFPID-115266 affected Cisco — —
CVRFPID-115268 affected Cisco — —
CVRFPID-115269 affected Cisco — —
CVRFPID-115270 affected Cisco — —
CVRFPID-115276 affected Cisco — —
CVRFPID-116857 affected Cisco — —
CVRFPID-185176 affected Cisco — —
CVRFPID-185177 affected Cisco — —
CVRFPID-185179 affected Cisco — —
CVRFPID-185180 affected Cisco — —
CVRFPID-185251 affected Cisco — —
CVRFPID-185252 affected Cisco — —
CVRFPID-185253 affected Cisco — —
CVRFPID-185254 affected Cisco — —
CVRFPID-185255 affected Cisco — —
CVRFPID-185256 affected Cisco — —
CVRFPID-185257 affected Cisco — —
CVRFPID-188865 affected Cisco — —
CVRFPID-188866 affected Cisco — —
CVRFPID-188867 affected Cisco — —
CVRFPID-191201 affected Cisco — —
CVRFPID-191202 affected Cisco — —
CVRFPID-191203 affected Cisco — —
CVRFPID-191204 affected Cisco — —
CVRFPID-191205 affected Cisco — —
CVRFPID-191206 affected Cisco — —
CVRFPID-191207 affected Cisco — —
CVRFPID-191208 affected Cisco — —
CVRFPID-191211 affected Cisco — —
CVRFPID-191212 affected Cisco — —
CVRFPID-191213 affected Cisco — —
CVRFPID-191214 affected Cisco — —
CVRFPID-192947 affected Cisco — —
CVRFPID-194998 affected Cisco — —
CVRFPID-194999 affected Cisco — —
CVRFPID-195000 affected Cisco — —
CVRFPID-195001 affected Cisco — —
CVRFPID-195002 affected Cisco — —
CVRFPID-195003 affected Cisco — —
CVRFPID-195004 affected Cisco — —
CVRFPID-195005 affected Cisco — —
CVRFPID-195006 affected Cisco — —
CVRFPID-195007 affected Cisco — —
CVRFPID-195008 affected Cisco — —
CVRFPID-198551 affected Cisco — —
CVRFPID-198552 affected Cisco — —
CVRFPID-198553 affected Cisco — —
CVRFPID-198554 affected Cisco — —
CVRFPID-198555 affected Cisco — —
CVRFPID-198556 affected Cisco — —
CVRFPID-198557 affected Cisco — —
CVRFPID-198558 affected Cisco — —
CVRFPID-198559 affected Cisco — —
CVRFPID-198560 affected Cisco — —
CVRFPID-198561 affected Cisco — —
CVRFPID-198562 affected Cisco — —
CVRFPID-198563 affected Cisco — —
CVRFPID-198564 affected Cisco — —
CVRFPID-198565 affected Cisco — —
CVRFPID-198566 affected Cisco — —
CVRFPID-202938 affected Cisco — —
CVRFPID-202940 affected Cisco — —
CVRFPID-202941 affected Cisco — —
CVRFPID-202942 affected Cisco — —
CVRFPID-202943 affected Cisco — —
CVRFPID-202944 affected Cisco — —
CVRFPID-202945 affected Cisco — —
CVRFPID-202946 affected Cisco — —
CVRFPID-202947 affected Cisco — —
CVRFPID-202948 affected Cisco — —
CVRFPID-202949 affected Cisco — —
CVRFPID-202950 affected Cisco — —
CVRFPID-202951 affected Cisco — —
CVRFPID-202952 affected Cisco — —
CVRFPID-202953 affected Cisco — —
CVRFPID-202954 affected Cisco — —
CVRFPID-202955 affected Cisco — —
CVRFPID-202956 affected Cisco — —
CVRFPID-202957 affected Cisco — —
CVRFPID-202958 affected Cisco — —
CVRFPID-202959 affected Cisco — —
CVRFPID-202960 affected Cisco — —
CVRFPID-204544 affected Cisco — —
CVRFPID-206218 affected Cisco — —
CVRFPID-206486 affected Cisco — —
CVRFPID-206487 affected Cisco — —
CVRFPID-206488 affected Cisco — —
CVRFPID-206489 affected Cisco — —
CVRFPID-206490 affected Cisco — —
CVRFPID-206491 affected Cisco — —
CVRFPID-206492 affected Cisco — —
CVRFPID-206493 affected Cisco — —
CVRFPID-206494 affected Cisco — —
CVRFPID-206495 affected Cisco — —
CVRFPID-206496 affected Cisco — —
CVRFPID-206497 affected Cisco — —
CVRFPID-206498 affected Cisco — —
CVRFPID-206499 affected Cisco — —
CVRFPID-206500 affected Cisco — —
CVRFPID-206501 affected Cisco — —
CVRFPID-206502 affected Cisco — —
CVRFPID-206503 affected Cisco — —
CVRFPID-206504 affected Cisco — —
CVRFPID-207900 affected Cisco — —
CVRFPID-207903 affected Cisco — —
CVRFPID-207904 affected Cisco — —
CVRFPID-207905 affected Cisco — —
CVRFPID-208301 affected Cisco — —
CVRFPID-210982 affected Cisco — —
CVRFPID-210983 affected Cisco — —
CVRFPID-210984 affected Cisco — —
CVRFPID-210985 affected Cisco — —
CVRFPID-210986 affected Cisco — —
CVRFPID-210988 affected Cisco — —
CVRFPID-211050 affected Cisco — —
CVRFPID-211051 affected Cisco — —
CVRFPID-211052 affected Cisco — —
CVRFPID-211053 affected Cisco — —
CVRFPID-211054 affected Cisco — —
CVRFPID-211055 affected Cisco — —
CVRFPID-211056 affected Cisco — —
CVRFPID-211057 affected Cisco — —
CVRFPID-211058 affected Cisco — —
CVRFPID-211059 affected Cisco — —
CVRFPID-211060 affected Cisco — —
CVRFPID-212705 affected Cisco — —
CVRFPID-212706 affected Cisco — —
CVRFPID-212707 affected Cisco — —
CVRFPID-212708 affected Cisco — —
CVRFPID-70762 affected Cisco — —
CVRFPID-97260 affected Cisco — —
CVRFPID-97261 affected Cisco — —
CVRFPID-99994 affected Cisco — —
CVRFPID-99996 affected Cisco — —
CVRFPID-99997 affected Cisco — —
Upstream advisory

cisco-sa-20160706-vcs

Cisco PSIRTEPSS <= 49%2016-07-06

Cisco Video Communication Server and Expressway Trusted Certificate Authentication Bypass Vulnerability

CVEs:CVE-2016-1444

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112250 affected Cisco — —
CVRFPID-209614 affected Cisco — —
Upstream advisory

cisco-sa-20160727-psc

Cisco PSIRTEPSS <= 49%2016-07-27

Cisco Prime Service Catalog Reflected Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1462

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-202401 affected Cisco — —
Upstream advisory

cisco-sa-20160727-avs

Cisco PSIRTEPSS <= 49%2016-07-27

Cisco Nexus 1000v Application Virtual Switch Cisco Discovery Protocol Packet Processing Denial of Service Vulnerability

CVEs:CVE-2016-1465

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-191380 affected Cisco — —
CVRFPID-191381 affected Cisco — —
CVRFPID-191557 affected Cisco — —
CVRFPID-191558 affected Cisco — —
CVRFPID-191559 affected Cisco — —
CVRFPID-191560 affected Cisco — —
CVRFPID-191561 affected Cisco — —
CVRFPID-191562 affected Cisco — —
CVRFPID-191563 affected Cisco — —
CVRFPID-196618 affected Cisco — —
CVRFPID-196619 affected Cisco — —
CVRFPID-210024 affected Cisco — —
CVRFPID-217747 affected Cisco — —
CVRFPID-217748 affected Cisco — —
Upstream advisory

cisco-sa-20160714-wms2

Cisco PSIRTEPSS <= 49%2016-07-14

Cisco WebEx Meetings Server Administrator Interface Cross-Site Request Forgery Vulnerability

CVEs:CVE-2016-1448

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190702 affected Cisco — —
Upstream advisory

cisco-sa-20160714-ms

Cisco PSIRTEPSS <= 49%2016-07-14

Cisco Meeting Server Persistent Cross-Site Scripting Vulnerability

CVEs:CVE-2016-1451

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-217166 affected Cisco — —
Upstream advisory

cisco-sa-20160727-vsrm

Cisco PSIRTEPSS <= 49%2016-07-27

Cisco Videoscape Session Resource Manager Denial of Service Vulnerability

CVEs:CVE-2016-1467

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-217768 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.