Cisco Security Advisories · April 2020 — Cisco Security Advisories
10 advisories 18 CVEs 1 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2020-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-voip-phones-rce-dos-rB6EeRXs

Cisco PSIRTExploitedCISA KEV listedHIGH2020-04-15

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

CVEs:CVE-2020-3161

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205455 affected Cisco — —
CVRFPID-211541 affected Cisco — —
CVRFPID-235374 affected Cisco — —
CVRFPID-238623 affected Cisco — —
CVRFPID-238624 affected Cisco — —
CVRFPID-4473 affected Cisco — —
Upstream advisory

cisco-sa-webex-player-Q7Rtgvby

Cisco PSIRTCoalition ESS < 30%CRITICAL2020-04-15

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability

CVEs:CVE-2020-3194

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-228295 affected Cisco — —
Upstream advisory

cisco-sa-wlc-gas-dos-8FsE3AWH

Cisco PSIRTCoalition ESS < 30%HIGH2020-04-15

Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability

CVEs:CVE-2020-3273

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-114902 affected Cisco — —
CVRFPID-114905 affected Cisco — —
CVRFPID-188675 affected Cisco — —
CVRFPID-188676 affected Cisco — —
CVRFPID-194376 affected Cisco — —
CVRFPID-194377 affected Cisco — —
CVRFPID-194378 affected Cisco — —
CVRFPID-194379 affected Cisco — —
CVRFPID-194380 affected Cisco — —
CVRFPID-200677 affected Cisco — —
CVRFPID-200678 affected Cisco — —
CVRFPID-200772 affected Cisco — —
CVRFPID-202724 affected Cisco — —
CVRFPID-202725 affected Cisco — —
CVRFPID-202728 affected Cisco — —
CVRFPID-206305 affected Cisco — —
CVRFPID-207506 affected Cisco — —
CVRFPID-207941 affected Cisco — —
CVRFPID-208446 affected Cisco — —
CVRFPID-210976 affected Cisco — —
CVRFPID-210977 affected Cisco — —
CVRFPID-210978 affected Cisco — —
CVRFPID-210979 affected Cisco — —
CVRFPID-210980 affected Cisco — —
CVRFPID-210981 affected Cisco — —
CVRFPID-211322 affected Cisco — —
CVRFPID-222773 affected Cisco — —
CVRFPID-223146 affected Cisco — —
CVRFPID-230322 affected Cisco — —
CVRFPID-230323 affected Cisco — —
CVRFPID-230394 affected Cisco — —
CVRFPID-230395 affected Cisco — —
CVRFPID-230396 affected Cisco — —
CVRFPID-230397 affected Cisco — —
CVRFPID-230403 affected Cisco — —
CVRFPID-230404 affected Cisco — —
CVRFPID-230405 affected Cisco — —
CVRFPID-230406 affected Cisco — —
CVRFPID-230407 affected Cisco — —
CVRFPID-230408 affected Cisco — —
CVRFPID-230409 affected Cisco — —
CVRFPID-230410 affected Cisco — —
CVRFPID-230411 affected Cisco — —
CVRFPID-230412 affected Cisco — —
CVRFPID-230413 affected Cisco — —
CVRFPID-230842 affected Cisco — —
CVRFPID-230843 affected Cisco — —
CVRFPID-230844 affected Cisco — —
CVRFPID-230845 affected Cisco — —
CVRFPID-230846 affected Cisco — —
CVRFPID-230847 affected Cisco — —
CVRFPID-230848 affected Cisco — —
CVRFPID-230849 affected Cisco — —
CVRFPID-230850 affected Cisco — —
CVRFPID-230851 affected Cisco — —
CVRFPID-230852 affected Cisco — —
CVRFPID-234402 affected Cisco — —
CVRFPID-247201 affected Cisco — —
CVRFPID-247203 affected Cisco — —
CVRFPID-247204 affected Cisco — —
CVRFPID-247206 affected Cisco — —
CVRFPID-247207 affected Cisco — —
CVRFPID-247208 affected Cisco — —
CVRFPID-247209 affected Cisco — —
CVRFPID-247210 affected Cisco — —
CVRFPID-247211 affected Cisco — —
CVRFPID-247212 affected Cisco — —
CVRFPID-247213 affected Cisco — —
CVRFPID-247214 affected Cisco — —
CVRFPID-247215 affected Cisco — —
CVRFPID-247216 affected Cisco — —
CVRFPID-247217 affected Cisco — —
CVRFPID-248129 affected Cisco — —
CVRFPID-248130 affected Cisco — —
CVRFPID-248131 affected Cisco — —
CVRFPID-259638 affected Cisco — —
CVRFPID-269461 affected Cisco — —
CVRFPID-269462 affected Cisco — —
CVRFPID-270351 affected Cisco — —
CVRFPID-270352 affected Cisco — —
CVRFPID-270353 affected Cisco — —
CVRFPID-270354 affected Cisco — —
CVRFPID-270356 affected Cisco — —
CVRFPID-270357 affected Cisco — —
CVRFPID-277158 affected Cisco — —
Upstream advisory

cisco-sa-xesdwcinj-AcQ5MxCn

Cisco PSIRTCoalition ESS < 30%HIGH2020-04-29

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

CVEs:CVE-2019-16011

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-275036 affected Cisco — —
CVRFPID-275038 affected Cisco — —
CVRFPID-275040 affected Cisco — —
CVRFPID-275042 affected Cisco — —
CVRFPID-275043 affected Cisco — —
CVRFPID-275044 affected Cisco — —
CVRFPID-275045 affected Cisco — —
CVRFPID-275046 affected Cisco — —
CVRFPID-275047 affected Cisco — —
CVRFPID-275048 affected Cisco — —
CVRFPID-275049 affected Cisco — —
CVRFPID-275050 affected Cisco — —
CVRFPID-275051 affected Cisco — —
CVRFPID-275052 affected Cisco — —
CVRFPID-275053 affected Cisco — —
CVRFPID-275055 affected Cisco — —
CVRFPID-275056 affected Cisco — —
CVRFPID-275057 affected Cisco — —
CVRFPID-275058 affected Cisco — —
CVRFPID-275059 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.