Cisco has released security updates to address vulnerabilities in multiple Cisco products.

Cisco has released security updates to address critical vulnerabilities (CVE-2022-20827, CVE-2022-20841, CVE-2022-20842) in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. An unauthenticated attacker could exploit the flaws to execute arbitrary code or cause a denial of service (DoS) condition on an affected device.

Cisco has also addressed medium severity vulnerabilities (CVE-2022-20820, CVE-2022-20852, CVE-2022-20914, CVE-2022-20816, CVE-2022-20869) in Cisco Webex Meetings, Cisco Identity Services Engine (ISE), Cisco Unified CM, Cisco Unified CM SME, Cisco BroadWorks Application Delivery Platform products. An attacker could exploit these vulnerabilities to conduct a cross-site scripting (XSS) attack, obtain sensitive information, delete arbitrary files on an affected system.

Details on all of the addressed vulnerabilities are available on Cisco’s security portal - cisco.com.