Cisco Security Advisories · August 2017 — Cisco Security Advisories
34 advisories 34 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2017-08. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20170802-ise

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Identity Services Engine Authentication Bypass Vulnerability

CVEs:CVE-2017-6747

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-111903 affected Cisco — —
Upstream advisory

cisco-sa-20170802-ucm1

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Unified Communications Manager Directory Traversal Vulnerability

CVEs:CVE-2017-6758

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-88444 affected Cisco — —
Upstream advisory

cisco-sa-20170802-asa2

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Adaptive Security Appliance Username Enumeration Information Disclosure Vulnerability

CVEs:CVE-2017-6752

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-206488 affected Cisco — —
CVRFPID-221027 affected Cisco — —
Upstream advisory

cisco-sa-20170802-ms

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Meeting Server H.264 Protocol Denial of Service Vulnerability

CVEs:CVE-2017-6763

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-217166 affected Cisco — —
Upstream advisory

cisco-sa-20170816-vcs

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

CVEs:CVE-2017-6790

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112250 affected Cisco — —
Upstream advisory

cisco-sa-20170816-em

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Virtual Network Function Element Manager Arbitrary Command Execution Vulnerability

CVEs:CVE-2017-6710

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227765 affected Cisco — —
Upstream advisory

cisco-sa-20170802-vds

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Videoscape Distribution Suite Cache Server Denial of Service Vulnerability

CVEs:CVE-2017-6745

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-228152 affected Cisco — —
Upstream advisory

cisco-sa-20170802-asa1

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6765

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-6588 affected Cisco — —
Upstream advisory

cisco-sa-20170816-usf

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Ultra Services Framework AutoVNF Configuration Information Disclosure Vulnerability

CVEs:CVE-2017-6771

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227680 affected Cisco — —
Upstream advisory

cisco-sa-20170816-crr

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

CVEs:CVE-2017-6784

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-183630 affected Cisco — —
Upstream advisory

cisco-sa-20170802-ucm

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Unified Communications Manager SQL Injection Vulnerability

CVEs:CVE-2017-6757

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-88444 affected Cisco — —
Upstream advisory

cisco-sa-20170816-ucm

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Unified Communications Manager Horizontal Privilege Escalation Vulnerability

CVEs:CVE-2017-6785

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-88444 affected Cisco — —
Upstream advisory

cisco-sa-20170802-pcpt

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Prime Collaboration Provisioning Tool UpgradeManager File Write Vulnerability

CVEs:CVE-2017-6759

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209583 affected Cisco — —
Upstream advisory

cisco-sa-20170816-csa

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Security Appliances SNMP Polling Information Disclosure Vulnerability

CVEs:CVE-2017-6783

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco — —
CVRFPID-189790 affected Cisco — —
CVRFPID-189791 affected Cisco — —
Upstream advisory

cisco-sa-20170802-sntc

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Smart Net Total Care Contracts Details Page SQL Injection Vulnerability

CVEs:CVE-2017-6754

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-228649 affected Cisco — —
Upstream advisory

cisco-sa-20170802-asa

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Adaptive Security Appliance Authenticated Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6764

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-6588 affected Cisco — —
Upstream advisory

cisco-sa-20170802-cf

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Finesse Reflected Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6761

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193469 affected Cisco — —
Upstream advisory

cisco-sa-20170802-cj

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6762

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-203403 affected Cisco — —
Upstream advisory

cisco-sa-20170816-caw

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6788

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-109810 affected Cisco — —
Upstream advisory

cisco-sa-20170816-esc3

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Elastic Services Controller Configuration Parameters Information Disclosure Vulnerability

CVEs:CVE-2017-6777

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227689 affected Cisco — —
Upstream advisory

cisco-sa-20170816-usp

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Ultra Services Platform Deployment Configuration Information Disclosure Vulnerability

CVEs:CVE-2017-6778

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227698 affected Cisco — —
Upstream advisory

cisco-sa-20170816-apic1

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Application Policy Infrastructure Controller SSH Privilege Escalation Vulnerability

CVEs:CVE-2017-6767

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-202553 affected Cisco — —
Upstream advisory

cisco-sa-20170816-staros2

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco StarOS for ASR 5000 Series Routers FTP Configuration File Modification Vulnerability

CVEs:CVE-2017-6774

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193199 affected Cisco — —
Upstream advisory

cisco-sa-20170802-fpw

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Firepower System Software Secure Sockets Layer Policy Bypass Vulnerability

CVEs:CVE-2017-6766

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205007 affected Cisco — —
Upstream advisory

cisco-sa-20170816-esc1

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Elastic Services Controller Configuration Files Information Disclosure Vulnerability

CVEs:CVE-2017-6772

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227689 affected Cisco — —
Upstream advisory

cisco-sa-20170816-esc2

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Elastic Services Controller Cross-Site Scripting Vulnerability

CVEs:CVE-2017-6776

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227689 affected Cisco — —
Upstream advisory

cisco-sa-20170823-cms

Cisco PSIRTCoalition ESS < 30%2017-08-23

Cisco Meeting Server Command Injection and Privilege Escalation Vulnerability

CVEs:CVE-2017-6794

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-217166 affected Cisco — —
Upstream advisory

cisco-sa-20170802-pcpt1

Cisco PSIRTCoalition ESS < 30%2017-08-02

Cisco Prime Collaboration Provisioning Tool Pervasive Cross-Site Request Forgery Vulnerability

CVEs:CVE-2017-6756

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209583 affected Cisco — —
Upstream advisory

cisco-sa-20170816-apic2

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Application Policy Infrastructure Controller Custom Binary Privilege Escalation Vulnerability

CVEs:CVE-2017-6768

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-202553 affected Cisco — —
Upstream advisory

cisco-sa-20170816-staros1

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco StarOS for ASR 5000 Series Routers Command-Line Interface Security Bypass Vulnerability

CVEs:CVE-2017-6773

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-193199 affected Cisco — —
Upstream advisory

cisco-sa-20170816-esc4

Cisco PSIRTCoalition ESS < 30%2017-08-16

Cisco Elastic Services Controller Sensitive Log Information Disclosure Vulnerability

CVEs:CVE-2017-6786

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-227689 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.