{"id":8584,"date":"2021-09-16T04:30:00","date_gmt":"2021-09-16T11:30:00","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8584"},"modified":"2023-03-07T15:30:04","modified_gmt":"2023-03-07T22:30:04","slug":"august-cisco-patches-43-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/august-cisco-patches-43-security-vulnerabilities\/","title":{"rendered":"August: Cisco Patches 43 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Cisco Systems had released security patches to address 43 unique vulnerabilities in August, ranging in importance from critical, high, and medium severity. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 512px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-1-12.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">An Analysis of Cisco August Patched Vulnerabilities<\/h2>\n<p dir=\"ltr\">The 43 vulnerabilities that were patched in August include<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">6 CVEs classified as Remote Code Execution bugs<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs have Privilege Escalation capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">16 CVEs with Denial of Service<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs are Command Injection Execution<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs are linked to Cross-Site Scripting<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\">Two CVEs are weaponized with known exploits and being exploited in the wild.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-4-8.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Patch Latency<\/h2>\n<p dir=\"ltr\">In this edition, we analyzed the Patch Latency Metrics for the collated vulnerabilities.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">66% of patches were released on the same day when the vulnerability got published by the vendor.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">9% of patches were released within the range of 2 and 50 days when the vulnerability got published by the vendor.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">16% of patches were released within the range of 100 and 200 days when the vulnerability got published by the vendor.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">CVE-2019-1727, rated as a high severity, received a patch after 833 days.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\" role=\"presentation\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 366px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-7.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Zero Days<\/h2>\n<p dir=\"ltr\">Cisco disclosed two zero-day bugs that received a security update this August.<\/p>\n<p dir=\"ltr\">CVE-2021-1585 is a remote code execution (RCE) vulnerability in the Adaptive Security Device Manager (ADSM) Launcher that can be caused by improper signature verification for code exchanged between the ASDM and the Launcher. This flaw has a CVSS v3 score of 8.1 (high) which leads to Improper Control of Generation of Code (&#8216;Code Injection&#8217;) under CWE-94.<\/p>\n<p dir=\"ltr\">Another Zero-day registered as CVE-2021-34730, a Denial of Service vulnerability\u00a0 in Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. This has a CVSS v3 score of 9.8 (critical) which leads to Improper Input Validation under CWE-20 (2021 CWE Top 25 Most Dangerous Software Weaknesses).<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 426px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-2-15.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Old Vulnerabilities<\/h2>\n<p dir=\"ltr\">5 old vulnerabilities have been patched by Cisco in August 2021, spanning the years from 2019 to 2020.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs have known exploits.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs are featured in CISA.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">3 CVEs are rated high and 2 are of low severity.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs are categorized under <a href=\"https:\/\/cwe.mitre.org\/top25\/archive\/2021\/2021_cwe_top25.html\">2021 CWE Top 25 Most Dangerous Software Weaknesses<\/a><\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 466px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-3-8.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">CISA Alert<\/h2>\n<p dir=\"ltr\">Among these August Cisco patched vulnerabilities, six CVEs are red flagged by CISA.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">80% of the alerted CVEs are older ones.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs have known exploits.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">1 CVE is rated critical and two are of high severity.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs are categorized under <a href=\"https:\/\/cwe.mitre.org\/top25\/archive\/2021\/2021_cwe_top25.html\">2021 CWE Top 25 Most Dangerous Software Weaknesses<\/a><\/p>\n<\/li>\n<\/ul>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrWzcgx0yPSDLeQg?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: Cisco August Patches 2021<\/strong><\/p>\n<p dir=\"ltr\">Despite the fact that software is easier to update than hardware, vulnerabilities are just as frequent and deadly. Hence, beware of newly disclosed vulnerabilities and do your utmost to implement updates as quickly as possible.<\/p>\n<p dir=\"ltr\">\n","protected":false},"excerpt":{"rendered":"<p>Cisco Systems had released security patches to address 43 unique vulnerabilities in August, ranging in importance from critical, high, and medium severity. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority. An Analysis of Cisco August Patched Vulnerabilities The 43 vulnerabilities that were patched in August include [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14437,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[293,289,288,291],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8584"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14437"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8584"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}