Cisco issues 17 security updates

Cisco released 17 security updates in the past week, with eight considered to have a potentially high impact and the remainder rated medium.

The updates cover a variety of products and services with the high-rated vulnerabilities leading to a denial of service or a command line interface (CLI) command injection issue if exploited.

The DoS vulnerabilities exist in Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements (CVE-2020-316), Cisco MDS 9000 Series Multilayer Switches (CVE-2020-3175), Cisco FXOS and NX-OS Software (CVE-2020-3172), Cisco FXOS, IOS XR, and NX-OS Software (CVE-2020-3120) and Cisco IP Phone Remote (CVE-2020-3111).

The CLI command injection vulnerabilities exist in Cisco UCS Manager Software (CVE-2020-3173), Cisco FXOS and UCS Manager Software (CVE-2020-3167) and Cisco FXOS and UCS Manager Software Local Management (CVE-2020-3171).

Cisco recommends customers update their software as soon as possible.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.