Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018

On November 5, 2018, the Apache Struts Team released a security announcement urging an upgrade of the Commons FileUpload library to version 1.3.3 on systems using Struts 2.3.36 or earlier releases. Systems using earlier versions of this library may be exposed to attacks that could allow execution...

Cisco NX-OS SNMP DoS.

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service vulnerability due to improper validation of SNMP protocol data. A remote authenticated attacker, using a specially crafted SNMP packet, can cause the SNMP application to restart resulting in a DoS...

CISCO-SA-20181019-LIBSSH

creationtimestamp| type| source ---|---|--- 2018-10-20 14:07:51+00:00| seen| https://t.me/canyoupwnme/4614...

Cisco IOS Software PTP DoS Vulnerability (cisco-sa-20180926-ptp)

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software IPsec DoS Vulnerability (cisco-sa-20180926-ipsec)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors could allow an authenticated, local attacker to execute specific CLI commands with root privileges on the Cisco Firepower Management Center FM...

Cisco Unity Connection File Upload Denial of Service Vulnerability

A vulnerability in the Bulk Administration Tool BAT for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the affected software does not restrict the maximum size of...

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Cisco Security Advisories and Alerts webpage and apply...

Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability

A vulnerability in the Cisco Discovery Protocol CDP module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS condition. The vulnerability is due to incorrect processing of certain C...

Cisco Unified Communications Manager IM & Presence Service Apache Struts RCE (CSCvm14049)

According to its self-reported version, the Cisco Unified Communications Manager IM & Presence Service is affected by a Remote Code Execution vulnerability. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Unified Communications Manager Denial-of-Service Vulnerability (DoS)

According to its self-reported version, the Cisco Unified Communications Manager is affected by a Denial-of-Service vulnerability. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Identity Services Engine Struts2 Namespace Vulnerability

According to its self-reported version, the Cisco Identity Services Engine Software is affected by a struts2 namespace vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...

Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018

A vulnerability in Apache Struts could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because the affected software insufficiently validates user-supplied input, allowing the use of results with no namespace value and the use of...

Threat Outbreak Alert RuleID33317: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58703 First Published: 2018 August 15 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33317 may contain the following files: Name |...

Threat Outbreak Alert RuleID33320: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58706 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33320 may contain the following files: Name |...

Threat Outbreak Alert RuleID33318: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58704 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33318 may contain the following files: Name |...

Threat Outbreak Alert RuleID33379: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58752 First Published: 2018 August 15 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33379 may contain the following files: Name |...

Threat Outbreak Alert RuleID33375: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58751 First Published: 2018 August 15 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33375 may contain the following files: Name |...

Threat Outbreak Alert RuleID33321: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58713 First Published: 2018 August 15 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33321 may contain the following files: Name |...

Threat Outbreak Alert RuleID33369: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58748 First Published: 2018 August 15 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33369 may contain the following files: Name |...