Rewterz Threat Advisory – Multiple Cisco Products Vulnerabilities

Severity

High

Analysis Summary

CVE-2024-20290 CVSS:7.5

Cisco Secure Endpoint Connector for Windows and Secure Endpoint Private Cloud are vulnerable to a denial of service, caused by an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. By submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device, a remote attacker could exploit this vulnerability to cause the ClamAV scanning process to terminate, resulting in a denial of service.

CVE-2024-20252, CVE-2024-20254, CVE-2024-20255

Cisco Expressway Series and TelePresence Video Communication Server (VCS) is vulnerable to cross-site request forgery, caused by improper verification of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to perform unauthorized actions. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

Impact

• Denial of Service
• Gain Access

Indicators Of Compromise

CVE

• CVE-2023-40363

Affected Vendors

Cisco

Affected Products

• Cisco Telepresence Video Communication Server
• Cisco Expressway Series
• Cisco Secure Endpoint Connector for Windows
• Cisco Secure Endpoint Private Cloud

Remediation

Refer to Cisco Security Advisory for patch, upgrade, or suggested workaround information.

Cisco Secure Endpoint

Cisco Expressway