{"id":235049,"date":"2020-08-31T09:47:28","date_gmt":"2020-08-31T07:47:28","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=235049"},"modified":"2024-07-31T22:07:04","modified_gmt":"2024-07-31T20:07:04","slug":"cisco-sicherheitfixes-fr-network-os","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2020\/08\/31\/cisco-sicherheitfixes-fr-network-os\/","title":{"rendered":"Cisco Sicherheitsfixes f&uuml;r Network OS"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Schutz.jpg\" width=\"40\" height=\"47\" align=\"left\" \/>[<a href=\"https:\/\/borncity.com\/win\/2020\/09\/01\/cisco-sicherheitfixes-fr-network-os\/\" target=\"_blank\" rel=\"noopener noreferrer\">English<\/a>]Administratoren von Cisco-Produkten (Switches etc.) m\u00fcssen patchen. Denn der Hersteller hat die Woche sechs Sicherheitshinweise mit Warnungen vor Schwachstellen in Produkten herausgegeben.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg05.met.vgwort.de\/na\/202e067851d0426386ac1e07a5979b85\" alt=\"\" width=\"1\" height=\"1\" \/>Ich bin \u00fcber <a href=\"https:\/\/twitter.com\/threatpost\/status\/1300176465758162944\" target=\"_blank\" rel=\"noopener noreferrer\">nachfolgenden Tweet<\/a> auf dieses Thema aufmerksam geworden. Die Sicherheitshinweise betreffen eine Reihe von Cisco-Produkten.<\/p>\n<p><a href=\"https:\/\/twitter.com\/threatpost\/status\/1300176465758162944\" target=\"_blank\" rel=\"noopener noreferrer\"><img decoding=\"async\" title=\"Cisco-Alert\" src=\"https:\/\/i.imgur.com\/xbnKYhS.jpg\" alt=\"Cisco-Alert\" \/><\/a><\/p>\n<p>Threadpost <a href=\"https:\/\/threatpost.com\/cisco-high-severity-bugs-impact-switches-fibre-storage\/158691\/\" target=\"_blank\" rel=\"noopener noreferrer\">weist<\/a> auf diese Sicherheitshinweise hin. Cisco Systems hat am 26. August 2020 acht schwerwiegende Fehler, die sich auf eine Reihe seiner Netzwerkger\u00e4te, einschlie\u00dflich seiner Switches und Glasfaser-gest\u00fctzte Speicherl\u00f6sungen (fiber storage solution), auswirken, \u00f6ffentlich bekannt gemacht. Ciscos NX-OS war am st\u00e4rksten betroffen: Sechs Sicherheitswarnungen betrafen das Netzwerkbetriebssystem, das in vielen Cisco-L\u00f6sungen die Basis bildet. Zus\u00e4tzlich wurden weitere Sicherheitshinweise f\u00fcr zus\u00e4tzliche Applicances zum 27. und 29. August 2020 nachgereicht. Hier ein Auszug aus dem <a href=\"https:\/\/tools.cisco.com\/security\/center\/publicationListing.x?product=Cisco&amp;sort=-day_sir#~Vulnerabilities\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco Security Advisory<\/a>:<\/p>\n<ul>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability<\/a>: High, CVE-2020-3566, 2020 Aug 29<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-asaftd-ro-path-KJuQhB86\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability<\/a>: High, CVE-2020-3452, 2020 Aug 27<\/li>\n<li><a href=\"https:\/\/web.archive.org\/web\/20220528085445\/https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability<\/a>: High, CVE-2020-3517, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nxos-dme-rce-cbE3nhZS\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability<\/a>: High, CVE-2020-3415, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-n3n9k-priv-escal-3QhXJBC\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability<\/a>: High, CVE-2020-3394, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nxosbgp-mvpn-dos-K8kbCrJp\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability<\/a>: High, CVE-2020-3398, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nxosbgp-nlri-dos-458rG2OQ\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability<\/a>: High, CVE-2020-3397, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-callhome-cmdinj-zkxzSCY\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software Call Home Command Injection Vulnerability<\/a>: High, CVE-2020-3454, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20180620-nx-os-cli-injection\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software CLI Arbitrary Command Injection Vulnerability<\/a>: High, CVE-2018-0307, 2020 Aug 26<\/li>\n<li>Cisco NX-OS Software CLI Arbitrary Command Execution Vulnerability: High, CVE-2018-0306, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nxos-pim-memleak-dos-tC8eP7uw\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability<\/a>: High, CVE-2020-3338, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20190821-imc-cmdinject-1896\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability<\/a>: High, CVE-2019-1896, 2020 Aug 26<\/li>\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-ucs-cli-dos-GQUxCnTe\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability<\/a>: Medium, CVE-2020-3504, 2020 Aug 26<\/li>\n<\/ul>\n<p>Details lassen sich in den verlinkten Cisco Security Advisories nachlesen.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[English]Administratoren von Cisco-Produkten (Switches etc.) m\u00fcssen patchen. Denn der Hersteller hat die Woche sechs Sicherheitshinweise mit Warnungen vor Schwachstellen in Produkten herausgegeben.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[731,426,185],"tags":[3218,4328],"class_list":["post-235049","post","type-post","status-publish","format-standard","hentry","category-gerate","category-sicherheit","category-update","tag-cisco","tag-sicherheit"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/235049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=235049"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/235049\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=235049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=235049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=235049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}