Categories: Computer SecuritySecurity Updates

Cisco Released Security Updates & Fixed 37 Vulnerabilities that Affected Cisco Products

Cisco released security updates for its products that affected by 36 different Vulnerabilities and some of the critical flaws leads attacker run arbitrary code in the vulnerable Cisco products.

Cisco addressed 3 “CRITICAL” Vulnerabilities, 8 vulnerabilities categorized under the severity rate as “HIGH” and 26 vulnerabilities addressed as “MEDIUM” Severity.

Critical vulnerabilities allow an attacker to perform file upload and command execution, Un authentication access, and authentication bypass Attack in vulnerable Cisco products

Critical Severity Vulnerabilities

Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

Critical

CVE-2018-15379

2018 Oct 03

1.0

Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

Critical

CVE-2018-15379

2018 Oct 03

1.0

Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

Critical

CVE-2018-15379

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability

Critical

CVE-2018-15386

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability

Critical

CVE-2018-15386

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability

Critical

CVE-2018-15386

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Authentication Bypass Vulnerability

Critical

CVE-2018-0448

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Authentication Bypass Vulnerability

Critical

CVE-2018-0448

2018 Oct 03

1.0

Cisco Digital Network Architecture Center Authentication Bypass Vulnerability

Critical

CVE-2018-0448

2018 Oct 03

1.0

High Severity Vulnerabilities

Linux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 2018

High

CVE-2018-5391

2018 Oct 04

1.11

Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

High

CVE-2018-15408
CVE-2018-15409

2018 Oct 03

1.0

Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

High

CVE-2018-15408
CVE-2018-15409

2018 Oct 03

1.0

Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

High

CVE-2018-15408
CVE-2018-15409

2018 Oct 03

1.0

Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

High

CVE-2018-15387

2018 Oct 03

1.0

Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

High

CVE-2018-15387

2018 Oct 03

1.0

Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

High

CVE-2018-15387

2018 Oct 03

1.0

Cisco HyperFlex Software Static Signing Key Vulnerability

High

CVE-2018-15382

2018 Oct 03

1.0

Cisco HyperFlex Software Static Signing Key Vulnerability

High

CVE-2018-15382

2018 Oct 03

1.0

Cisco HyperFlex Software Static Signing Key Vulnerability

High

CVE-2018-15382

2018 Oct 03

1.0

Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

High

CVE-2018-15390

2018 Oct 03

1.0

Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

High

CVE-2018-15390

2018 Oct 03

1.0

Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

High

CVE-2018-15390

2018 Oct 03

1.0

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

High

CVE-2018-0455

2018 Oct 03

1.0

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

High

CVE-2018-0455

2018 Oct 03

1.0

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

High

CVE-2018-0455

2018 Oct 03

1.0

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

High

CVE-2018-15389

2018 Oct 03

1.0

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

High

CVE-2018-15389

2018 Oct 03

1.0

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

High

CVE-2018-15389

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

High

CVE-2018-15383

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

High

CVE-2018-15383

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

High

CVE-2018-15383

2018 Oct 03

1.0

Medium Severity Vulnerabilities

Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability

Medium

CVE-2018-15391

2018 Oct 03

1.1

Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability

Medium

CVE-2018-15391

2018 Oct 03

1.1

Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability

Medium

CVE-2018-15391

2018 Oct 03

1.1

Cisco Webex Centers Cross-Site Scripting Vulnerability

Medium

CVE-2018-15436

2018 Oct 03

1.0

Cisco Webex Centers Cross-Site Scripting Vulnerability

Medium

CVE-2018-15436

2018 Oct 03

1.0

Cisco Webex Centers Cross-Site Scripting Vulnerability

Medium

CVE-2018-15436

2018 Oct 03

1.0

Cisco Unity Connection File Upload Denial of Service Vulnerability

Medium

CVE-2018-15396

2018 Oct 03

1.0

Cisco Unity Connection File Upload Denial of Service Vulnerability

Medium

CVE-2018-15396

2018 Oct 03

1.0

Cisco Unity Connection File Upload Denial of Service Vulnerability

Medium

CVE-2018-15396

2018 Oct 03

1.0

Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability

Medium

CVE-2018-15434

2018 Oct 03

1.0

Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability

Medium

CVE-2018-15434

2018 Oct 03

1.0

Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability

Medium

CVE-2018-15434

2018 Oct 03

1.0

Cisco UCS Director Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15406

2018 Oct 03

1.0

Cisco UCS Director Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15406

2018 Oct 03

1.0

Cisco UCS Director Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15406

2018 Oct 03

1.0

Cisco Unity Connection Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15426

2018 Oct 03

1.0

Cisco Unity Connection Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15426

2018 Oct 03

1.0

Cisco Unity Connection Stored Cross-Site Scripting Vulnerability

Medium

CVE-2018-15426

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15433

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15433

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15433

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15432

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15432

2018 Oct 03

1.0

Cisco Prime Infrastructure Information Disclosure Vulnerability

Medium

CVE-2018-15432

2018 Oct 03

1.0

Multiple Vulnerabilities in Cisco Identity Services Engine

Medium

CVE-2018-15424
CVE-2018-15425

2018 Oct 03

1.0

Multiple Vulnerabilities in Cisco Identity Services Engine

Medium

CVE-2018-15424
CVE-2018-15425

2018 Oct 03

1.0

Multiple Vulnerabilities in Cisco Identity Services Engine

Medium

CVE-2018-15424
CVE-2018-15425

2018 Oct 03

1.0

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

Medium

CVE-2018-15428

2018 Oct 03

1.0

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

Medium

CVE-2018-15428

2018 Oct 03

1.0

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

Medium

CVE-2018-15428

2018 Oct 03

1.0

Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability

Medium

CVE-2018-15392

2018 Oct 03

1.0

Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability

Medium

CVE-2018-15392

2018 Oct 03

1.0

Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability

Medium

CVE-2018-15392

2018 Oct 03

1.0

Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-0446

2018 Oct 03

1.0

Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-0446

2018 Oct 03

1.0

Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-0446

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability

Medium

CVE-2018-15405

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability

Medium

CVE-2018-15405

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability

Medium

CVE-2018-15405

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

Medium

CVE-2018-15404

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

Medium

CVE-2018-15404

2018 Oct 03

1.0

Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

Medium

CVE-2018-15404

2018 Oct 03

1.0

Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability

Medium

CVE-2018-15429

2018 Oct 03

1.0

Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability

Medium

CVE-2018-15429

2018 Oct 03

1.0

Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability

Medium

CVE-2018-15429

2018 Oct 03

1.0

Cisco HyperFlex World-Readable Sensitive Information Vulnerability

Medium

CVE-2018-15407

2018 Oct 03

1.0

Cisco HyperFlex World-Readable Sensitive Information Vulnerability

Medium

CVE-2018-15407

2018 Oct 03

1.0

Cisco HyperFlex World-Readable Sensitive Information Vulnerability

Medium

CVE-2018-15407

2018 Oct 03

1.0

Cisco HyperFlex UI Clickjacking Vulnerability

Medium

CVE-2018-15423

2018 Oct 03

1.0

Cisco HyperFlex UI Clickjacking Vulnerability

Medium

CVE-2018-15423

2018 Oct 03

1.0

Cisco HyperFlex UI Clickjacking Vulnerability

Medium

CVE-2018-15423

2018 Oct 03

1.0

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-15401

2018 Oct 03

1.0

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-15401

2018 Oct 03

1.0

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Medium

CVE-2018-15401

2018 Oct 03

1.0

Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

Medium

CVE-2018-0453

2018 Oct 03

1.0

Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

Medium

CVE-2018-0453

2018 Oct 03

1.0

Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

Medium

CVE-2018-0453

2018 Oct 03

1.0

Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability

Medium

CVE-2018-15430

2018 Oct 03

1.0

Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability

Medium

CVE-2018-15430

2018 Oct 03

1.0

Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability

Medium

CVE-2018-15430

2018 Oct 03

1.0

Multiple Cisco Unified Communications Products Open Redirect Vulnerability

Medium

CVE-2018-15403

2018 Oct 03

1.0

Multiple Cisco Unified Communications Products Open Redirect Vulnerability

Medium

CVE-2018-15403

2018 Oct 03

1.0

Multiple Cisco Unified Communications Products Open Redirect Vulnerability

Medium

CVE-2018-15403

2018 Oct 03

1.0

Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

Medium

CVE-2018-15400

2018 Oct 03

1.0

Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

Medium

CVE-2018-15400

2018 Oct 03

1.0

Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

Medium

CVE-2018-15400

2018 Oct 03

1.0

Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability

Medium

CVE-2018-15399

2018 Oct 03

1.0

Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability

Medium

CVE-2018-15399

2018 Oct 03

1.0

Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability

Medium

CVE-2018-15399

2018 Oct 03

1.0

Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability

Medium

CVE-2018-15397

2018 Oct 03

1.0

Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability

Medium

CVE-2018-15397

2018 Oct 03

1.0

Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability

Medium

CVE-2018-15397

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability

Medium

CVE-2018-15398

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability

Medium

CVE-2018-15398

2018 Oct 03

1.0

Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability

Medium

CVE-2018-15398

2018 Oct 03

1.0

Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability

Medium

CVE-2018-0465

2018 Oct 03

1.0

Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability

Medium

CVE-2018-0465

2018 Oct 03

1.0

Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability

Medium

CVE-2018-0465

2018 Oct 03

1.0

With the last security update, Cisco Patched Critical Vulnerability With Video Surveillance Manager that allows an unauthenticated remote attacker to gain access to the vulnerable system as a root user, which has a default, static user credentials.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Next Mozilla Releases Critical Security Update For Thunderbird »

Previous « Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System

CISA Issues Five ICS Advisories Highlighting Critical Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released five urgent advisories on April…

7 minutes ago

Cyber Security News

Google Cloud Composer Flaw Allows Attackers to Gain Elevated Privileges

Research disclosed a now-patched high-severity vulnerability in Google Cloud Platform’s (GCP) Cloud Composer service, dubbed ConfusedComposer.…

1 hour ago

Cyber Security News

Moodle Core vulnerabilities Allow Attackers to Evade Security Measures

A recent security audit has uncovered critical vulnerabilities within Moodle, the widely used open-source learning…

2 hours ago

Cyber Security News

Hackers Exploit Cloudflare Tunnel Infrastructure to Deploy Multiple Remote Access Trojans

The Sekoia TDR (Threat Detection & Research) team has reported on a sophisticated network infrastructure…

15 hours ago

Cyber Security News

Threat Actors Leverage npm and PyPI with Impersonated Dev Tools for Credential Theft

The Socket Threat Research Team has unearthed a trio of malicious packages, two hosted on…

15 hours ago

Cyber Security News

Hackers Exploit Legitimate Microsoft Utility to Deliver Malicious DLL Payload

Hackers are now exploiting a legitimate Microsoft utility, mavinject.exe, to inject malicious DLLs into unsuspecting…

17 hours ago

Cisco Released Security Updates & Fixed 37 Vulnerabilities that Affected Cisco Products

Critical Severity Vulnerabilities

High Severity Vulnerabilities

Medium Severity Vulnerabilities

Related Post

Recent Posts

CISA Issues Five ICS Advisories Highlighting Critical Vulnerabilities

Google Cloud Composer Flaw Allows Attackers to Gain Elevated Privileges

Moodle Core vulnerabilities Allow Attackers to Evade Security Measures

Hackers Exploit Cloudflare Tunnel Infrastructure to Deploy Multiple Remote Access Trojans

Threat Actors Leverage npm and PyPI with Impersonated Dev Tools for Credential Theft

Hackers Exploit Legitimate Microsoft Utility to Deliver Malicious DLL Payload