Cisco Security Advisories · April 2020 — Cisco Security Advisories
10 advisories 18 CVEs 1 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2020-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-voip-phones-rce-dos-rB6EeRXs

Cisco PSIRTExploitedCISA KEV listedHIGH2020-04-15

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

CVEs:CVE-2020-3161

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205455 affected Cisco
CVRFPID-211541 affected Cisco
CVRFPID-235374 affected Cisco
CVRFPID-238623 affected Cisco
CVRFPID-238624 affected Cisco
CVRFPID-4473 affected Cisco
Upstream advisory

cisco-sa-webex-player-Q7Rtgvby

Cisco PSIRTEPSS <= 49%CRITICAL2020-04-15

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability

CVEs:CVE-2020-3194

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-228295 affected Cisco
Upstream advisory

cisco-sa-wlc-gas-dos-8FsE3AWH

Cisco PSIRTEPSS <= 49%HIGH2020-04-15

Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability

CVEs:CVE-2020-3273

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-114902 affected Cisco
CVRFPID-114905 affected Cisco
CVRFPID-188675 affected Cisco
CVRFPID-188676 affected Cisco
CVRFPID-194376 affected Cisco
CVRFPID-194377 affected Cisco
CVRFPID-194378 affected Cisco
CVRFPID-194379 affected Cisco
CVRFPID-194380 affected Cisco
CVRFPID-200677 affected Cisco
CVRFPID-200678 affected Cisco
CVRFPID-200772 affected Cisco
CVRFPID-202724 affected Cisco
CVRFPID-202725 affected Cisco
CVRFPID-202728 affected Cisco
CVRFPID-206305 affected Cisco
CVRFPID-207506 affected Cisco
CVRFPID-207941 affected Cisco
CVRFPID-208446 affected Cisco
CVRFPID-210976 affected Cisco
CVRFPID-210977 affected Cisco
CVRFPID-210978 affected Cisco
CVRFPID-210979 affected Cisco
CVRFPID-210980 affected Cisco
CVRFPID-210981 affected Cisco
CVRFPID-211322 affected Cisco
CVRFPID-222773 affected Cisco
CVRFPID-223146 affected Cisco
CVRFPID-230322 affected Cisco
CVRFPID-230323 affected Cisco
CVRFPID-230394 affected Cisco
CVRFPID-230395 affected Cisco
CVRFPID-230396 affected Cisco
CVRFPID-230397 affected Cisco
CVRFPID-230403 affected Cisco
CVRFPID-230404 affected Cisco
CVRFPID-230405 affected Cisco
CVRFPID-230406 affected Cisco
CVRFPID-230407 affected Cisco
CVRFPID-230408 affected Cisco
CVRFPID-230409 affected Cisco
CVRFPID-230410 affected Cisco
CVRFPID-230411 affected Cisco
CVRFPID-230412 affected Cisco
CVRFPID-230413 affected Cisco
CVRFPID-230842 affected Cisco
CVRFPID-230843 affected Cisco
CVRFPID-230844 affected Cisco
CVRFPID-230845 affected Cisco
CVRFPID-230846 affected Cisco
CVRFPID-230847 affected Cisco
CVRFPID-230848 affected Cisco
CVRFPID-230849 affected Cisco
CVRFPID-230850 affected Cisco
CVRFPID-230851 affected Cisco
CVRFPID-230852 affected Cisco
CVRFPID-234402 affected Cisco
CVRFPID-247201 affected Cisco
CVRFPID-247203 affected Cisco
CVRFPID-247204 affected Cisco
CVRFPID-247206 affected Cisco
CVRFPID-247207 affected Cisco
CVRFPID-247208 affected Cisco
CVRFPID-247209 affected Cisco
CVRFPID-247210 affected Cisco
CVRFPID-247211 affected Cisco
CVRFPID-247212 affected Cisco
CVRFPID-247213 affected Cisco
CVRFPID-247214 affected Cisco
CVRFPID-247215 affected Cisco
CVRFPID-247216 affected Cisco
CVRFPID-247217 affected Cisco
CVRFPID-248129 affected Cisco
CVRFPID-248130 affected Cisco
CVRFPID-248131 affected Cisco
CVRFPID-259638 affected Cisco
CVRFPID-269461 affected Cisco
CVRFPID-269462 affected Cisco
CVRFPID-270351 affected Cisco
CVRFPID-270352 affected Cisco
CVRFPID-270353 affected Cisco
CVRFPID-270354 affected Cisco
CVRFPID-270356 affected Cisco
CVRFPID-270357 affected Cisco
CVRFPID-277158 affected Cisco
Upstream advisory

cisco-sa-xesdwcinj-AcQ5MxCn

Cisco PSIRTEPSS <= 49%HIGH2020-04-29

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

CVEs:CVE-2019-16011

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-275036 affected Cisco
CVRFPID-275038 affected Cisco
CVRFPID-275040 affected Cisco
CVRFPID-275042 affected Cisco
CVRFPID-275043 affected Cisco
CVRFPID-275044 affected Cisco
CVRFPID-275045 affected Cisco
CVRFPID-275046 affected Cisco
CVRFPID-275047 affected Cisco
CVRFPID-275048 affected Cisco
CVRFPID-275049 affected Cisco
CVRFPID-275050 affected Cisco
CVRFPID-275051 affected Cisco
CVRFPID-275052 affected Cisco
CVRFPID-275053 affected Cisco
CVRFPID-275055 affected Cisco
CVRFPID-275056 affected Cisco
CVRFPID-275057 affected Cisco
CVRFPID-275058 affected Cisco
CVRFPID-275059 affected Cisco
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.