Number: AV16-164
Date: 13 October 2016
Purpose
The purpose of this advisory is to bring attention to multiple Cisco security advisories.
Assessment
Cisco released multiple security updates to address vulnerabilities (critical to medium) in Cisco Meeting Server Client, Cisco Wide Area Application Services Central Manager, Cisco Unified Communications Manager, Cisco Prime Infrastructure and Evolved Programmable Network Manager, Cisco Finesse and Cisco cBR-8 Converged Broadband Router.
CVE References:
Critical Impact CVE: CVE-2016-6445
Medium Impact CVE: CVE-2016-6437, CVE-2016-6438, CVE-2016-6440, CVE-2016-6442, CVE-2016-6443
Suggested Action
CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-msc
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-cbr-8
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-ucm
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-fin
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-prime