Sistemas Afectados

• Cisco Enterprise NFV Infrastructure Software
• Cisco Expressway Series and Cisco TelePresence Video Communication Server
• Cisco Touch 10 Devices
• Cisco Secure Web Appliance Content Encoding Filter
• Cisco BroadWorks Hosted Thin Receptionist
• Cisco ATA 190 Series Analog Telephone Adapter Software
• Cisco Smart Software Manager On-Prem
• Cisco Jabber Client Software Extensible Messaging and Presence Protocol

Descripción

Se identificaron múltiples vulnerabilidades en los productos de Cisco. Un atacante remoto podría explotar algunas de estas vulnerabilidades para eludir las restricciones de seguridad, la ejecución remota de código, la manipulación de datos, la elevación de privilegios y la creación de secuencias de comandos entre sitios en el sistema de destino.

Referencia

• CVE-2022-20686
• CVE-2022-20687
• CVE-2022-20688
• CVE-2022-20689
• CVE-2022-20690
• CVE-2022-20691
• CVE-2022-20766
• CVE-2022-20793
• CVE-2022-20814
• CVE-2022-20853
• CVE-2022-20917
• CVE-2022-20929
• CVE-2022-20931
• CVE-2022-20939
• CVE-2022-20948
• CVE-2022-20952
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-ISV-BQrvEv2
• hhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-DAV-HSvEHHEt
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-IVV-4A66Dsfj
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-bypass-bwBfugek
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-thinrcpt-xss-gSj4CecU
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-priv-esc-SEjz69dv
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM

Solución

Se recomienda aplicar las actualizaciones y correcciones emitidas por el proveedor en los productos afectados.