Number: AV18-115
Date: 11 July 2018
Purpose
The purpose of this advisory is to bring attention to multiple Cisco security advisories.
Assessment
Cisco released multiple security updates to address several vulnerabilities in various Cisco products.
Affected Products:
- Cisco StarOS
- Cisco IP Phone 6800, 7800, and 8800
- Cisco Digital Network Architecture (DNA) Center
- Cisco Firepower System Software Detection Engine
- Cisco Firepower System Software
- Cisco FireSIGHT System Software
- Cisco Web Security Appliance
CVE References: CVE-2018-0369, CVE-2018-0341, CVE-2018-0366, CVE-2018-0384, CVE-2018-0383, CVE-2018-0385, CVE-2018-0370, CVE-2018-0368
Suggested action
CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.
References
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-staros-dos
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-phone-webui-inject
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-dnac-id
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firepower-dos
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firepwr-ssl-dos
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firesight-file-bypass
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firesight-url-bypass
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-wsa-xss