Ref# Cisco | Date: Feb 21st 2020

---

Description

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. It is recommended that you take the necessary precautions by ensuring your products are always updated:

• Smart Software Manager On-Prem Static Credential Vulnerability cisco-sa-on-prem-static-cred-sL8rDs8
• Unified Contact Center Express Privilege Escalation Vulnerability cisco-sa-uccx-privesc-Zd7bvwyf
• Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability cisco-sa-20200219-ucs-boot-bypass
• Email Security Appliance and Content Security Management Appliance Denial-of-Service Vulnerability cisco-sa-20200219-esa-sma-dos
• Email Security Appliance Denial-of-Service Vulnerability cisco-sa-20200219-esa-dos
• Data Center Network Manager Privilege Escalation Vulnerability cisco-sa-20200219-dcnm-priv-esc
• Data Center Network Manager Cross-Site Request Forgery Vulnerability cisco-sa-20200219-dcnm-csrf

 

The Guyana National CIRT recommends users and administration to review these updates and to apply them where necessary.

References

• Cisco Releases Security Updates. (2020, February 20). Retrieved from Us-Cert: https://www.us-cert.gov/ncas/current-activity/2020/02/20/cisco-releases-security-updates