Update now! Cisco fixes several vulnerabilities

🗓️ 04 Mar 2022 18:10:11Reported by Pieter ArntzType

malwarebytes🔗 blog.malwarebytes.com👁 32 Views

CIsco releases advisory on Expressway and VCS vulnerabilitie

Reporter	Title	Published	Views	Family All 67
ATTACKERKB	CVE-2022-20762	2 Mar 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20756	2 Mar 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20754	3 Mar 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-20755	3 Mar 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-20665	3 Mar 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the API of the Cisco Expressway Series and Cisco Telepresence VCS conference communication devices allows a hacker to re-record arbitrary files on the host operating system as the root user.	5 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices allows a hacker to execute arbitrary code as a root user.	5 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CLI command-line interface of the ConfD Common Execution Environment (CEE) deployment and management environment for cloud network functions based on Cisco Ultra Cloud Core – Subscriber Microservices Infrastructure (SMI) allows a malicious actor to execute arbitrary commands and gain elevated privileges.	28 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the command-line interface of StarOS systems allows attackers to execute arbitrary commands and increase their privileges.	28 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Identity Services Engine (ISE) allows a perpetrator to cause service interruptions.	7 Apr 202200:00	–	bdu_fstec

04 Mar 2022 18:10Current

7.8High risk

Vulners AI Score7.8

EPSS0.03299

cisco expressway vcs vulnerabilities api web-based management cve-2022-20754 cve-2022-20755 update cvss critical security advisory exploited