Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in its IOS, IOS XE, and IOx Software. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system or cause a denial-of-service condition.

Users and administrators are encouraged to review the following Cisco Security Advisories and apply the necessary updates:

• Cisco IOx Data in Motion Stack Overflow Vulnerability
• Cisco IOS XE Software for Cisco ASR 920 Series Routers Zero Touch Provisioning Denial of Service Vulnerability
• Cisco IOS XE Software HTTP Command Injection Vulnerability
• Cisco IOS XE Software Web User Interface Denial of Service Vulnerability
• Cisco IOS and IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability
• Cisco IOS and IOS XE Software DHCP Client Denial of Service Vulnerability
• Cisco Application-Hosting Framework Arbitrary File Creation Vulnerability
• Cisco Application-Hosting Framework Directory Traversal Vulnerability