Security Advisory

Cisco Product Security Update Advisory

  • Apr 23 2024

Overview

 

Cisco has released security updates to fix vulnerabilities in its products. users of affected products are advised to update to the latest version.

 

Affected Products

 

Cisco 5000 Series ENCS, Catalyst 8300 Series Edge uCPEs

  • <=3.12
  • <= 4.13

 

Cisco UCS C-Series M4 Rack Server

  • <= 4.0
  • <= 4.1

 

Cisco UCS C-Series M5 Rack Server

  • <= 4.0
  • 4.1, 4.2, and 4.3

 

Cisco UCS C-Series M6 Rack Server

  • 4.2, 4.3 Versions

 

Cisco UCS C-Series M7 Rack Server

  • 4.version 3

 

Cisco UCS E-Series M2, Cisco UCS E-Series M3

  • 3.2.6 (included) to 3.2.15 (excluded)

 

Cisco UCS E-Series M6

  • <= 4.12

 

Cisco Telemetry Broker Appliance, Secure Endpoint Private Cloud Appliances, Secure Firewall Management Center Appliances, Secure Malware Analytics Appliances, Secure Network Server Appliances

  • < 4.3 (2.240009)

 

IEC6400 Edge Compute Appliances, Secure Email Gateways, Secure Email and Web Manager, Secure Web Appliances

  • < 4.2(3j)

 

Secure Network Analytics Appliances

  • < 4.1(2m) (M4)
  • < 4.3 (2.240009) (m5, m6)

 

Resolved Vulnerabilities

 

Command Injection Vulnerability in the Cisco Integrated Management Controller CLI (CVE-2024-20295) [1]

 

Vulnerability Patches

 

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

Cisco 5000 Series ENCS, Catalyst 8300 Series Edge uCPEs

  • version 4.14.1

 

Cisco UCS C-Series M4 Rack Server

  • 4.1 (2m) version

 

Cisco UCS C-Series M5 Rack Server

  • 4.1 (3m), 4.2 (3j), 4.3 (2.240002) Versions

 

Cisco UCS C-Series M6 Rack Server

  • 4.2 (3j), 4.3 (2.240002) Versions

 

Cisco UCS C-Series M7 Rack Server

  • version 4.3 (2.240002)

 

Cisco UCS E-Series M2, Cisco UCS E-Series M3

  • version 3.2.15

 

Cisco UCS E-Series M6

  • version 4.12.2

 

Cisco Telemetry Broker Appliance, Secure Endpoint Private Cloud Appliances, Secure Firewall Management Center Appliances, Secure Malware Analytics Appliances, Secure Network Server Appliances, Secure Network Server Appliances

  • version 4.3 (2.240009)

 

IEC6400 Edge Compute Appliances, Secure Email Gateways, Secure Email and Web Manager, Secure Web Appliances

  • 4.2 (3j) version

 

Secure Network Analytics Appliances

  • 4.1(2m) (M4) version
  • 4.3 (2.240009) (M5, M6) Versions

 

Referenced Sites

 

[1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-mUx4c5AJ

Tags:

Previous Post

Next Post