Vulnerabilities fixed in Cisco products

🗓️ 25 Mar 2021 00:00:00Reported by NCSCType

Cisco fixed vulnerabilities enabling cross-site scripting, Denial of Service, remote code execution, data access, and privilege escalation.

Reporter	Title	Published	Views	Family All 530
ATTACKERKB	CVE-2021-1435	24 Mar 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient validation of input data, allows a perpetrator to trigger a service failure state.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient input data validation, allows a perpetrator to execute programs on the target system with elevated privileges or execute arbitrary code.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient certification verification, allows a malicious actor to intercept network requests from the vulnerable software and provide maliciously created certificates.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco IOS XE operating systems arises from incorrect checking of arguments passed in the loading script. This allows a malicious actor to execute arbitrary code on the vulnerable Linux-based device.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Jabber for Windows software platform lies in insufficient input data validation, which allows attackers to escalate their privileges, access confidential information, intercept secure network traffic, or cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the command-line interface (CLI) of Cisco IOS XE and Cisco IOS operating systems allows a attacker to obtain the password for the Common Industrial Protocol (CIP) and reconfigure the device.	5 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mDNS forwarding function in Cisco Aironet Access Points’ software allows a attacker to induce a service failure.	6 Apr 202100:00	–	bdu_fstec

25 Mar 2021 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 29.3

CVSS 3.19.9

CVSS 37

EPSS0.14294

SSVC