Number: AV16-170
Date: 21 October 2016
Purpose
The purpose of this advisory is to bring attention to multiple Cisco security advisories.
Assessment
Cisco released multiple security updates to address vulnerabilities (critical to medium) in Cisco ASA Software Identity Firewall, Cisco Unified Communications Manager, Cisco Firepower Detection Engine, Cisco ASA Software Local Certificate Authority and Cisco Meeting Server.
CVE References:
Critical Impact CVE: CVE-2016-6432
High Impact CVE: CVE-2016-6431, CVE-2016-6439
Medium Impact CVE: CVE-2016-6444, CVE-2016-6446
Suggested Action
CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-ca
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms1