Cisco Security Updates 16 February 2023

The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, perform cross-site scripting attacks, bypass security restrictions, execute arbitrary code, or cause a denial of service attack on the affected products.

Sample of the addressed vulnerabilities:

1- Cisco ClamAV Buffer Overflow (CVE-2023-20032):

• CVSS: 9.8

• Attack Vector: Network

• Attack Complexity: Low

• Privileges Required: None

• User Interaction: None

• Consequences: Gain Access

2- Cisco Nexus Dashboard Denial of Service (CVE-2023-20014):

• CVSS: 7.5

• Attack Vector: Network

• Attack Complexity: Low

• Privileges Required: None

• User Interaction: None

• Consequences: Denial of Service

Affected Products:

• Cisco Identity Services Engine.

• Cisco Email Security Appliance (ESA).

• Cisco Nexus Dashboard.

• Cisco AsyncOS for Secure Web Appliance.

• Cisco ClamAV.

• Cisco Secure Email and Web Manager.