{"id":8508,"date":"2021-10-26T18:10:30","date_gmt":"2021-10-27T01:10:30","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8508"},"modified":"2023-03-03T14:11:05","modified_gmt":"2023-03-03T21:11:05","slug":"september-cisco-patches-54-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/september-cisco-patches-54-security-vulnerabilities\/","title":{"rendered":"September 2021: Cisco Patches 54 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Cisco Systems had released security patches to address 54 unique vulnerabilities in September, ranging in importance from critical, high, and medium severity. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 800px; height: 513px;\" src=\"\/wp-content\/uploads\/2021\/06\/patch-watch-1-18.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><strong>An Analysis of Cisco September Patched Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">The 54 vulnerabilities that were patched in September include &#8211;<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs classified as Remote Code Execution bugs<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs have Privilege Escalation capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">15 CVEs with Denial of Service<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">5 CVEs are Information Disclosure<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs are linked to Cross-Site Scripting.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\">Among these patched vulnerabilities, CVE-2021-34746 is found to be publicly disclosed.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2021\/06\/patch-watch-3-13.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><strong>Zero Days<\/strong><\/h2>\n<p dir=\"ltr\">Cisco disclosed a zero-day bug that received a security update this September.<\/p>\n<p dir=\"ltr\">The security issue tracked as CVE-2021-34746 affects Terminal Access Controller Access-Control System Plus (TACACS+) authentication, authorization, and accounting (AAA) of Cisco&#8217;s Enterprise NFV Infrastructure Software, a solution designed to aid Virtualization Network Services so that VFNs are managed easily.<\/p>\n<p dir=\"ltr\">CVE-2021-34746 is caused by insufficient validation of user-supplied input given to an authentication script during the sign-in process. It allows unauthenticated, remote attackers to log in as an administrator on an unpatched device.<\/p>\n<p dir=\"ltr\">This CVE has a CVSS score of 9.8 (critical) and is categorized under CWE-289 (<a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/289.html\">Authentication Bypass by Alternate Name<\/a>).<\/p>\n<p dir=\"ltr\">A patch is now available for this authentication bypass vulnerability that was fixed in Cisco Enterprise NFVIS releases 4.6.1 and later.<\/p>\n<h2 dir=\"ltr\"><strong>Severity Scores<\/strong><\/h2>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 430px;\" src=\"\/wp-content\/uploads\/2021\/06\/patch-watch-2-20.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><strong>CWE Analysis<\/strong><\/h2>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2021\/06\/patch-watch-2-19.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr2zw3AXtbQmMa1v?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: Cisco September Patches 2021<\/strong><\/p>\n<h2><strong>CISA Alerts<\/strong><\/h2>\n<p dir=\"ltr\">CISA had issued a <a href=\"https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/09\/02\/cisco-releases-security-updates-cisco-enterprise-nfvis\">notice,<\/a> urging IT teams to update a Cisco system that has a critical vulnerability.\u00a0 Therefore, patching this CVE-2021-34746 vulnerability should be top priority.<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">To reduce the chance of information security breaches, patching is essential for safeguarding systems and data. We request all Cisco users to beware of newly disclosed vulnerabilities and urge them to implement updates as quickly as possible.<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>Does your organization have a patch management program? <a href=\"https:\/\/cybersecurityworks.com\/get-quote.php\">Talk to CSW\u2019s Experts to prioritize the threats that need immediate attention!<\/a><\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cisco Systems had released security patches to address 54 unique vulnerabilities in September, ranging in importance from critical, high, and medium severity. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority. An Analysis of Cisco September Patched Vulnerabilities The 54 vulnerabilities that were patched in September include [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14437,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[293,291],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8508"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14437"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8508"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}