Symptom
This product includes Third-party Software that is affected by the
vulnerabilities identified by the following Common Vulnerability and
Exposures (CVE) IDs:
CVE-2014-9645 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9645
CVE-2015-9261 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9261
CVE-2016-2147 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2147
CVE-2016-2148 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2148
CVE-2016-6301 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6301
CVE-2017-16544 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16544
CVE-2018-1000500 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000500
CVE-2018-1000517 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000517
CVE-2018-20679 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20679
CVE-2019-5747 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5747
CVE-2021-28831 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831
The affected third-party software component has been upgraded to a version that includes fixes for the vulnerability. Future versions of the product(s) will not be affected by this vulnerability.
Conditions
Device with default configuration.
Workaround
Not available or not applicable.
Further Problem Description
Additional details about the vulnerabilities listed above can be found
at http://cve.mitre.org/cve/cve.html.
PSIRT Evaluation:
The Cisco PSIRT has assigned this bug the following CVSS version 3.0 score.
The Base CVSS score as of the time of evaluation is: 9.8
https://tools.cisco.com/security/center/cvssCalculator.x?version=3.0&vector=CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID CVE-2014-9645, CVE-2015-9261, CVE-2016-2147, CVE-2016-2148, CVE-2016-6301, CVE-2017-16544, CVE-2018-1000500, CVE-2018-1000517, CVE-2018-20679, CVE-2019-5747, CVE-2021-28831 have been assigned to document this issue.
Additional information on Cisco's security vulnerability policy can be
found at the following URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
