Vulnerabilities fixed in Cisco products

🗓️ 23 Sep 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Cisco fixed vulnerabilities enabling denial of service and bypasses; CVE-2021-1619 grants full config access.

Reporter	Title	Published	Views	Family All 173
BDU FSTEC	The vulnerability in the implementation of authentication, authorization, and accounting functions for Cisco IOS XE operating systems allows a perpetrator to bypass the authentication process and trigger a service failure.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntax analyzer in the Cisco IOS XE and Cisco IOS operating systems’ command-line TrustSec CLI allows a attacker to trigger a service failure.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the channel-level implementation of Cisco IOS XE allows a attacker to trigger a service failure.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Voice Telephony Service Provider (VTSP) for Cisco IOS XE and Cisco IOS operating systems allows attackers to perform arbitrary actions on the vulnerable device.	21 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Network Address Translation (NAT) technology implemented in the Cisco IOS XE operating system allows attackers to bypass ALG and establish unauthorized connections.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the firewall function on Cisco IOS XE operating systems allows a hacker to bypass security restrictions.	10 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.	15 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Protection Against Distributed Denial of Service attacks function in Cisco IOS XE allows a attacker to cause a service failure.	15 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Access Control List configuration in Cisco IOS XE router operating systems of the ASR 900 and ASR 920 series allows a perpetrator to circumvent security restrictions.	15 Nov 202100:00	–	bdu_fstec

23 Sep 2021 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 210

CVSS 3.19.8

EPSS0.01

SSVC

denial of service bypass authentication bypass security measures high severity vulnerability full configuration access