Note to readers

This publication does not currently meet the Government of Canada's Web Standards. The information remains valid.

Cisco Multiple Security Advisories

Number: AV16-057
Date: 7 April 2016

Purpose

The purpose of this advisory is to bring attention to multiple Cisco security advisories.

Assessment

Cisco released multiple security updates to address critical vulnerabilities in the following software/hardware: 

Critical

  • Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability
  • Cisco UCS Invicta Default SSH Key Vulnerability

High

  • Cisco Prime Infrastructure and Evolved Programmable Network Manager Privilege Escalation API Vulnerability
  • Cisco TelePresence Server Crafted IPv6 Packet Handling Denial of Service Vulnerability
  • Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability
  • Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability
  • Vulnerability in GNU glibc Affecting Cisco Products: February 2016

Medium

  • Cisco IOS XR Software SCP and SFTP Modules Denial of Service Vulnerability

CVE-2016-1366, CVE-2016-1290, CVE-2016-1346, CVE-2016-1291, CVE-2016-1313, CVE-2015-6313, CVE-2015-6312, CVE-2015-7547

Suggested Action

CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.

References:

https://tools.cisco.com/security/center/publicationListing.x

Date modified: