Advisories
Cisco PSIRTWeaponized exploit2017-01-30
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: January and February 2017
CVEs:CVE-2017-3730CVE-2017-3731CVE-2017-3732CVE-2017-3733
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-111803 |
affected |
Cisco |
— |
— |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
| CVRFPID-112250 |
affected |
Cisco |
— |
— |
| CVRFPID-185359 |
affected |
Cisco |
— |
— |
| CVRFPID-187454 |
affected |
Cisco |
— |
— |
| CVRFPID-189790 |
affected |
Cisco |
— |
— |
| CVRFPID-189791 |
affected |
Cisco |
— |
— |
| CVRFPID-190324 |
affected |
Cisco |
— |
— |
| CVRFPID-190474 |
affected |
Cisco |
— |
— |
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
| CVRFPID-192127 |
affected |
Cisco |
— |
— |
| CVRFPID-193199 |
affected |
Cisco |
— |
— |
| CVRFPID-193469 |
affected |
Cisco |
— |
— |
| CVRFPID-194328 |
affected |
Cisco |
— |
— |
| CVRFPID-194456 |
affected |
Cisco |
— |
— |
| CVRFPID-194833 |
affected |
Cisco |
— |
— |
| CVRFPID-195842 |
affected |
Cisco |
— |
— |
| CVRFPID-195936 |
affected |
Cisco |
— |
— |
| CVRFPID-197112 |
affected |
Cisco |
— |
— |
| CVRFPID-198393 |
affected |
Cisco |
— |
— |
| CVRFPID-202553 |
affected |
Cisco |
— |
— |
| CVRFPID-202683 |
affected |
Cisco |
— |
— |
| CVRFPID-203051 |
affected |
Cisco |
— |
— |
| CVRFPID-203403 |
affected |
Cisco |
— |
— |
| CVRFPID-203607 |
affected |
Cisco |
— |
— |
| CVRFPID-203614 |
affected |
Cisco |
— |
— |
| CVRFPID-203650 |
affected |
Cisco |
— |
— |
| CVRFPID-203651 |
affected |
Cisco |
— |
— |
| CVRFPID-203652 |
affected |
Cisco |
— |
— |
| CVRFPID-203724 |
affected |
Cisco |
— |
— |
| CVRFPID-203755 |
affected |
Cisco |
— |
— |
| CVRFPID-205007 |
affected |
Cisco |
— |
— |
| CVRFPID-205455 |
affected |
Cisco |
— |
— |
| CVRFPID-208962 |
affected |
Cisco |
— |
— |
| CVRFPID-209582 |
affected |
Cisco |
— |
— |
| CVRFPID-210536 |
affected |
Cisco |
— |
— |
| CVRFPID-210554 |
affected |
Cisco |
— |
— |
| CVRFPID-210610 |
affected |
Cisco |
— |
— |
| CVRFPID-210644 |
affected |
Cisco |
— |
— |
| CVRFPID-210834 |
affected |
Cisco |
— |
— |
| CVRFPID-211541 |
affected |
Cisco |
— |
— |
| CVRFPID-213561 |
affected |
Cisco |
— |
— |
| CVRFPID-220254 |
affected |
Cisco |
— |
— |
| CVRFPID-4432 |
affected |
Cisco |
— |
— |
| CVRFPID-4844 |
affected |
Cisco |
— |
— |
| CVRFPID-5239 |
affected |
Cisco |
— |
— |
| CVRFPID-5834 |
affected |
Cisco |
— |
— |
| CVRFPID-73608 |
affected |
Cisco |
— |
— |
| CVRFPID-7368 |
affected |
Cisco |
— |
— |
| CVRFPID-77997 |
affected |
Cisco |
— |
— |
| CVRFPID-92631 |
affected |
Cisco |
— |
— |
| CVRFPID-93036 |
affected |
Cisco |
— |
— |
| CVRFPID-95900 |
affected |
Cisco |
— |
— |
| CVRFPID-95913 |
affected |
Cisco |
— |
— |
| CVRFPID-96689 |
affected |
Cisco |
— |
— |
| CVRFPID-97151 |
affected |
Cisco |
— |
— |
Cisco PSIRTWeaponized exploitHIGH2017-01-24
Cisco WebEx Browser Extension Remote Code Execution Vulnerability
CVEs:CVE-2017-3823
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
| CVRFPID-97151 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-25
Cisco TelePresence Multipoint Control Unit Remote Code Execution Vulnerability
CVEs:CVE-2017-3792
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190459 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-25
Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability
CVEs:CVE-2017-3790
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-112250 |
affected |
Cisco |
— |
— |
| CVRFPID-202683 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco ASR 5000 Software ipsecmgr Process IKE Packet Parsing Denial of Service Vulnerability
CVEs:CVE-2016-9216
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-193199 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-25
Cisco Adaptive Security Appliance CX Context-Aware Security Denial of Service Vulnerability
CVEs:CVE-2016-9225
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-184512 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco WebEx Meetings Server Command Bypass Vulnerability
CVEs:CVE-2017-3796
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco IOS and Cisco IOx Software Information Disclosure Vulnerability
CVEs:CVE-2017-3805
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco WebEx Meetings Server Information Disclosure Vulnerability
CVEs:CVE-2017-3797
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Email Security Appliance Filter Bypass Vulnerability
CVEs:CVE-2017-3800
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-189790 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco WebEx Meetings Server Arbitrary Password Change Vulnerability
CVEs:CVE-2017-3795
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability
CVEs:CVE-2017-3802
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-88444 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
CVEs:CVE-2017-3798
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-88444 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability
CVEs:CVE-2017-3794
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190702 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco WebEx Meeting Center Site Redirection Vulnerability
CVEs:CVE-2017-3799
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-97151 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco NetFlow Generation Appliance Cross-Site Scripting Vulnerability
CVEs:CVE-2016-9222
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-223150 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Hybrid Meeting Server Web Interface Cross-Site Request Forgery Vulnerability
CVEs:CVE-2016-9218
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-222576 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
CVEs:CVE-2017-3804
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-224614 |
affected |
Cisco |
— |
— |
| CVRFPID-224615 |
affected |
Cisco |
— |
— |
| CVRFPID-224616 |
affected |
Cisco |
— |
— |
| CVRFPID-224617 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco IOS for Catalyst 2960X and 3750X Switches Denial of Service Vulnerability
CVEs:CVE-2017-3803
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-2097 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Mobility Express 2800 and 3800 Denial of Service Vulnerability
CVEs:CVE-2016-9221
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190024 |
affected |
Cisco |
— |
— |
Cisco PSIRTEPSS <= 49%2017-01-18
Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
CVEs:CVE-2016-9220
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|
| CVRFPID-190024 |
affected |
Cisco |
— |
— |
