{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Cisco IOS XE SD-WAN versions 17.2.x ant\u00e9rieures \u00e0 17.2.1r","product":{"name":"IOS XE","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vManage versions 19.x ant\u00e9rieures \u00e0 19.2.2","product":{"name":"SD-WAN vManage","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vManage versions ant\u00e9rieures \u00e0 18.4.5","product":{"name":"SD-WAN vManage","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vManage versions 19.3.x et 20.x ant\u00e9rieures \u00e0 20.1.1","product":{"name":"SD-WAN vManage","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco DCNM versions 11.x ant\u00e9rieures \u00e0 11.4(1)","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco IOS XE SD-WAN versions ant\u00e9rieures \u00e0 16.12.3","product":{"name":"IOS XE","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vEdge, vBond et vSmart versions 19.3.x et 20.x ant\u00e9rieures \u00e0 20.1.1","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vEdge, vBond et vSmart versions 19.x ant\u00e9rieures \u00e0 19.2.2","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco SD-WAN vEdge, vBond et vSmart versions ant\u00e9rieures \u00e0 18.4.5","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2020-3382","url":"https://www.cve.org/CVERecord?id=CVE-2020-3382"},{"name":"CVE-2020-3376","url":"https://www.cve.org/CVERecord?id=CVE-2020-3376"},{"name":"CVE-2020-3374","url":"https://www.cve.org/CVERecord?id=CVE-2020-3374"},{"name":"CVE-2020-3375","url":"https://www.cve.org/CVERecord?id=CVE-2020-3375"},{"name":"CVE-2020-3384","url":"https://www.cve.org/CVERecord?id=CVE-2020-3384"},{"name":"CVE-2020-3383","url":"https://www.cve.org/CVERecord?id=CVE-2020-3383"},{"name":"CVE-2020-3386","url":"https://www.cve.org/CVERecord?id=CVE-2020-3386"},{"name":"CVE-2020-3377","url":"https://www.cve.org/CVERecord?id=CVE-2020-3377"}],"links":[],"reference":"CERTFR-2020-AVI-472","revisions":[{"description":"Version initiale","revision_date":"2020-07-30T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et\nune atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-devmgr-cmd-inj-Umc8RHNh du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-devmgr-cmd-inj-Umc8RHNh"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dcnm-path-trav-2xZOnJdR du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-path-trav-2xZOnJdR"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dcnm-improper-auth-7Krd9TDT du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-improper-auth-7Krd9TDT"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-uabvman-SYGzt8Bv du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uabvman-SYGzt8Bv"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dcnm-rest-inj-BCt8pwAJ du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-rest-inj-BCt8pwAJ"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdbufof-h5f5VSeL du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdbufof-h5f5VSeL"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dcnm-bypass-dyEejUMs du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dcnm-auth-bypass-JkubGpu3 du 29 juillet 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-auth-bypass-JkubGpu3"}]}