Cisco Security Updates – 08 June 2023

The addressed vulnerabilities could allow the attacker to execute arbitrary code, gain access, escalate privileges, cause a denial of service, or perform cross-site scripting on the affected products.

Sample of the addressed vulnerabilities:

1. Cisco Expressway Series and Cisco TelePresence VCS Privilege Escalation Vulnerability (CVE-2023-20105):

• CVSS: 9.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

2. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Denial of Service Vulnerability (CVE-2023-20006):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

Sample of the affected products:

• Cisco Expressway Series and Cisco TelePresence VCS.
• Cisco ASA Software (9.16.4) and Cisco FTD Software (7.2.1).
• Cisco AnyConnect.
• Small Business 200 Series Smart Switches.
• Cisco Unified CM and Unified CM SME.