Vulnerabilities fixed in Cisco IOS and IOS XE

🗓️ 25 Sep 2020 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Cisco IOS and IOS XE fix DoS, data manipulation, auth bypass, and privilege escalation.

Reporter	Title	Published	Views	Family All 460
BDU FSTEC	The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wireless data transmission technology for the Cisco IOS operating system on Cisco 800 Series Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers allows a intruder to gain unauthorized access to protected information or cause service failures.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WLAN Local Profiling function in the Cisco IOS XE operating system of Cisco Catalyst 9000 Series network devices allows a hacker to induce a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RESTCONF and NETCONF-YANG protocols implemented in the Cisco IOS XE operating system allows a attacker to cause service interruptions.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause service interruptions.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.	8 Oct 202000:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the Cisco IOS XE operating system’s web interface, allowing attackers to increase their privileges	9 Oct 202000:00	–	bdu_fstec

25 Sep 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.8

CVSS 3.18.8 - 9.1

CVSS 38.8

EPSS0.02226

SSVC

denial of service data manipulation authentication bypass security circumvention remote code execution data access privilege escalation