Ref# ADV2021_138 | Date: Aug 27th 2021

---

Cisco has published a security advisory highlighting vulnerabilities in multiple of its products on 25th August 2021. It is recommended that you take the necessary precautions by ensuring your products are always updated.

• Cisco Application Policy Infrastructure Controller Arbitrary File
• BlackBerry QNX-2021-001
• Cisco NX-OS Software VXLAN OAM
• Cisco NX-OS Software MPLS OAM
• Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod
• Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge
• Cisco Application Policy Infrastructure Controller Privilege
• Cisco Application Policy Infrastructure Controller App Privilege

For more information about these Cisco updates, you can follow the URLs:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-frw-Nt3RYxR2

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ngoam-dos-LTDb9Hv

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-mpls-oam-dos-sGO9x5GM

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-tcp-dos-YXukt6gM

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-queue-wedge-cLDDEfKF

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-pesc-pkmGK4J

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-chvul-CKfGYBh8

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.

PDF Download: Cisco Release Security Updates for Multiple Products.pdf

References

• Cisco security updates for multiple products (26th August 2021). Retrieved from Canadian Centre for Cyber Security.

          https://cyber.gc.ca/en/alerts/cisco-security-advisory-89

• Cisco security updates for multiple products (26th August 2021). Retrieved from Cybersecurity & Infrastructure Security Agency.

          https://us-cert.cisa.gov/ncas/current-activity/2021/08/19/cisco-releases-security-updates-multiple-products

• Cisco security updates for multiple products (25th August 2021). Retrieved from Cisco

          https://tools.cisco.com/security/center/publicationListing.x