Vulnerabilities fixed in Cisco IOS

🗓️ 29 Sep 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Cisco fixed IOS flaws on devices; risk includes Denial of service, data manipulation, and remote code execution.

Reporter	Title	Published	Views	Family All 270
ICS	#StopRansomware: Akira Ransomware	18 Apr 202412:00	–	ics
ATTACKERKB	CVE-2023-20269	6 Sep 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-20109	27 Sep 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the application-specific SAML interface of the Cisco Catalyst SD-WAN Manager centralized network management system allows a perpetrator to gain access to the application.	29 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of the Cisco DNA Center allows a hacker to read and modify data in its internal repository.	2 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco IOS XE’s Wireless Network Control (wncd) allows a hacker to trigger a failure in the denial-of-service attack.	3 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to deficiencies in authentication procedures, allows a perpetrator to trigger a service failure.	3 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a attacker to cause a service failure.	3 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CLI interface of the Cisco Catalyst SD-WAN Manager allows a attacker to revert to the previous configuration on a vulnerable instance.	3 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) allows a attacker to perform cross-site scripting attacks.	3 Oct 202300:00	–	bdu_fstec

29 Sep 2023 00:00Current

8High risk

Vulners AI Score8

CVSS 3.19.8

EPSS0.21583

SSVC

Cisco IOS Catalyst devices Aironet devices Integrated routers Analog voice gateways Denial of service Data manipulation Remote code execution