{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"UCS Server Software versions 4.x ant\u00e9rieures \u00e0 4.1(3n) pour UCS B-Series et X-Series Servers en mode UCS Manager ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Nexus Dashboard versions post\u00e9rieures \u00e0 3.1 et ant\u00e9rieures \u00e0 3.2(2f)","product":{"name":"Nexus Dashboard Fabric Controller","vendor":{"name":"Cisco","scada":false}}},{"description":"Intersight Server Firmware versions post\u00e9rieures \u00e0 5.1 et ant\u00e9rieures \u00e0 5.2(2.240073) pour UCS X-Series Servers","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 4.3 ant\u00e9rieures \u00e0 4.3(4c) pour UCS B-Series et X-Series Servers en mode UCS Manager ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"IEC6400 Edge Compute Appliances sans la mise \u00e0 jour IEC6400-HUU-4.2.3j.img ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Secure Malware Analytics Appliances versions ant\u00e9rieures \u00e0 2.19.4","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"ISE versions 3.1 \u00e0 3.4 sans le patch de s\u00e9curit\u00e9 ise-apply-CSCwn63400_3.1.x_patchall-SPA.tar.gz","product":{"name":"Identity Services Engine","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 4.2 ant\u00e9rieures \u00e0 4.2(3k) pour UCS B-Series et X-Series Servers en mode  UCS Manager ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Secure Firewall Management Center Appliances sans le dernier patch de s\u00e9curit\u00e9","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Intersight Server Firmware versions 5.0 ant\u00e9rieures \u00e0 5.0(4f) pour UCS X-Series Servers en mode  Intersight Managed ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 5.X ant\u00e9rieures \u00e0 5.2(2.240073) pour UCS B-Series Servers in Intersight Managed Mode","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 4.X ant\u00e9rieures \u00e0 4.2(3i) pour UCS B-Series Servers in Intersight Managed Mode","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Secure Network Analytics Appliances sans le correctif de s\u00e9curit\u00e9  patch-common-SNA-FIRMWARE-20240305-v2-01.swu ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 4.x ant\u00e9rieures \u00e0  4.2(2f), 4.2(3b) pour UCS C-Series et S-Series servers en mode standalone ou Intersight Managed Mode ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Secure Endpoint Private Cloud Appliances sans le dernier patch de s\u00e9curit\u00e9","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Intersight Server Firmware versions 5.x  ant\u00e9rieures \u00e0 5.2(2.240073) pour UCS B-Series Servers en mode  Intersight Managed ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco Telemetry Broker Appliance sans le microgiciel m6-tb2300-ctb-firmware-4.3-2.240009.iso","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"UCS Server Software versions 4.x ant\u00e9rieures \u00e0 4.2(2c), 4.2(3b)  pour UCS C-Series and S-Series Servers en mode UCS Manager ","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2025-20261","url":"https://www.cve.org/CVERecord?id=CVE-2025-20261"},{"name":"CVE-2025-20163","url":"https://www.cve.org/CVERecord?id=CVE-2025-20163"},{"name":"CVE-2025-20286","url":"https://www.cve.org/CVERecord?id=CVE-2025-20286"}],"links":[],"reference":"CERTFR-2025-AVI-0479","revisions":[{"description":"Version initiale","revision_date":"2025-06-05T00:00:00.000000"}],"risks":[{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco","vendor_advisories":[{"published_at":"2025-06-04","title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ucs-ssh-priv-esc-2mZDtdjM","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-ssh-priv-esc-2mZDtdjM"},{"published_at":"2025-06-04","title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ndfc-shkv-snQJtjrp","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp"},{"published_at":"2025-06-04","title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ise-aws-static-cred-FPMjUcm7","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-aws-static-cred-FPMjUcm7"}]}