Home
1
Hot News
2
Information Security
3
[Cybersecurity Vulnerability Notice] 思科產品存在多個漏洞4
https://www.kjintelligent.com/en/ KJ Intelligent Corp.
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.)
【出處:台灣電腦緊急應變小組 TWCert】◎ 內容說明Cisco Crosswork開發團隊於內部安全審查期間發現多項安全漏洞,並已完成修補。目前尚未發現有證據顯示這些漏洞遭到積極利用。為協助客戶及時部署安全更新並簡化漏洞揭露流程,Cisco已公開相關漏洞資訊及修補建議,詳細漏洞說明請參閱「漏洞資訊」。◎ 影響平台Cisco Crosswork 7.2.1(含)以前版本◎ 建議措施請更新至 Cisco Crosswork 7.2.1-SP(含)之後版本◎ 漏洞資訊名稱描述CVE-2026-20030 CVSS:10.0,為SQL指令所使用的特殊元素未適當處理漏洞CVE-2026-20357 CVSS:10.0,為關鍵功能缺少身分驗證漏洞CVE-2026-20358 CVSS:10.0,為外部控制檔案名稱或路徑漏洞CVE-2026-20359 CVSS:9.8,為憑證保護不足漏洞◎ 參考資訊Cisco Crosswork Security Hardening Release: August 2026https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9VhCVE-2026-20030https://nvd.nist.gov/vuln/detail/CVE-2026-20030CVE-2026-20357https://nvd.nist.gov/vuln/detail/CVE-2026-20357CVE-2026-20358https://nvd.nist.gov/vuln/detail/CVE-2026-20358CVE-2026-20359https://nvd.nist.gov/vuln/detail/CVE-2026-20359 https://www.kjintelligent.com/en/hot_538863.html [TWCERT 分享資安情資]_Cisco旗下Cisco Crosswork 存在4個重大資安漏洞 2026-09-21 2027-09-21
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.) https://www.kjintelligent.com/en/hot_538863.html
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.) https://www.kjintelligent.com/en/hot_538863.html
https://schema.org/EventMovedOnline https://schema.org/OfflineEventAttendanceMode
2026-09-21 http://schema.org/InStock TWD 0 https://www.kjintelligent.com/en/hot_538863.html



【雲智維資安預警通知】
一、摘要
        思科產品存在多個漏洞,允許遠端攻擊者可利用這些漏洞,於目標系統觸發阻斷服務狀況、洩露敏感資料及遠端執行任意程式碼。
二、存在風險
         思科產品存在多個漏洞,允許遠端攻擊者可利用這些漏洞,於目標系統觸發阻斷服務狀況、洩露敏感資料及遠端執行任意程式碼,其影響系統如下:
受影響之系統/漏洞描述:
MDS 9000 Series Multilayer Switches
Nexus 1000 Virtual Edge for VMware vSphere
Nexus 3000 Series Switches
Nexus 3000 Series Switches
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Nexus 9000 Series Fabric Switches in ACI mode
Nexus 9000 Series Switches in standalone NX-OS mode
Nexus 9000 Series Switches in standalone NX-OS mode
UCS 6400 Series Fabric Interconnects
UCS 6400 Series Fabric Interconnects
UCS 6500 Series Fabric Interconnects
UCS 6500 Series Fabric Interconnects
UCS X-Series Direct Fabric Interconnect 9108 100G


三、建議改善措施
        企業及使用者如有上述漏洞版本應儘速更新。
        情資報告連結:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n39k-isis-dos-JhJA8Rfx
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxospc-pim6-vG4jFPh
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-infodis-TEcTYSFG
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmdinj-qhNze5Ss

Previous Back to List Next