Cisco released security updates to address vulnerabilities in Cisco software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.
CISA encourages users and administrators to review the following advisories and apply necessary updates:
[ul]
[li]Cisco Secure Email Gateway Arbitrary File Write Vulnerability[/li][li]Cisco Smart Software Manager On-Prem Password Change Vulnerability[/li][li]Cisco Secure Web Appliance Privilege Escalation Vulnerability[/li][li]Cisco Identity Services Engine Arbitrary File Upload Vulnerability[/li][li]Cisco Intelligent Node Software Static Key Vulnerability[/li][li]Cisco Webex App Vulnerabilities[/li][li]Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerability[/li][li]Cisco Expressway Series Open Redirect Vulnerability[/li][li]Cisco Secure Email Gateway Server-Side Template Injection Vulnerability[/li][/ul]