Security Advisory Roll Up: Week Ending August 5, 2022

• Cisco Releases Security Updates for RV Series Routers
• F5 Releases Security Updates
• VMware urges admins to patch critical auth bypass bug immediately

_______________________________

Cisco Releases Security Updates for RV Series Routers

Situation:
Cisco has released security updates.

Problem:
Vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers.

Implication:
A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Need:
We encourage organizations to review Cisco advisory cisco-sa-sb-mult-vuln-CbVp4SUR and apply the necessary updates.

Additional Resources:

CISA Bulletin: Cisco Releases Security Updates for RV Series Routers:
https://www.cisa.gov/uscert/ncas/current-activity/2022/08/04/cisco-releases-security-updates-rv-series-routers

Cisco Security Advisories:
https://tools.cisco.com/security/center/publicationListing.x

cisco-sa-sb-mult-vuln-CbVp4SUR:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-mult-vuln-CbVp4SUR

________________________________

F5 Releases Security Updates

Situation:
F5 has released security updates.

Problem:
Vulnerabilities in multiple products.

Implication:
A privileged attacker could exploit some of these vulnerabilities to take control of an affected system.

Need:
We encourage organizations to review the F5 security advisories and apply the necessary updates.

Additional Resources:

CISA Bulletin: F5 Releases Security Updates
https://www.cisa.gov/uscert/ncas/current-activity/2022/08/04/f5-releases-security-updates
F5 security advisories:
https://support.f5.com/csp/article/K14649763

________________________________

VMware urges admins to patch critical auth bypass bug immediately

Situation:
VMware has released security updates.

Problem:
Multiple vulnerabilities in VMware’s Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector, and vRealize Automation.

Implication:
A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Need:
We encourage organizations to review VMware Security Advisory VMSA-2022-0021 and apply the necessary updates.

Additional Resources:

CISA Bulletin: VMware Releases Security Updates:
https://www.cisa.gov/uscert/ncas/current-activity/2022/08/03/vmware-releases-security-updates-0

VMSA-2022-0021:
https://www.vmware.com/security/advisories/VMSA-2022-0021.html