Cisco Applied Mitigation Bulletins http://tools.cisco.com/security/center/searchAIR.x These bulletins describe techniques that use Cisco product abilities to detect and mitigate exploits. Visit Technical White Papers and view Security Intelligence Best Practices for more information. en-us 1992-2010 Cisco Systems, Inc. All rights reserved. Cisco Applied Mitigation Bulletins Cisco Systems, Inc. 15 Identifying and Mitigating Exploitation of the Cisco IOS Software Smart Install Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=28655&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20Smart%20Install%20Denial%20of%20Service%20Vulnerability%26vs_k=1 This Cisco Applied Mitigation Bulletin has been updated to use new destinations for links to various supporting technical documents. 2015-12-24 16:49:29.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=28655 Identifying and Mitigating the Distributed Denial of Service Attacks Targeting Financial Institutions http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=27115&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20the%20Distributed%20Denial%20of%20Service%20Attacks%20Targeting%20Financial%20Institutions%26vs_k=1 This Cisco Applied Mitigation Bulletin has been updated to use new destinations for links to various supporting technical documents. 2015-12-01 16:31:28.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=27115 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for April 2015 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=38295&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20April%202015%26vs_k=1 <span id="ctl00_MainBodyContainer_DgFields_ctl03_lblField">This Applied Mitigation Bulletin has been updated with Sourcefire signature information.</span> 2015-04-14 20:40:53.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=38295 Identifying and Mitigating Multiple Vulnerabilities in Network Time Protocol http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36857&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Multiple%20Vulnerabilities%20in%20Network%20Time%20Protocol%26vs_k=1 This Cisco Applied Mitigation Bulletin has been updated to include the April 2015 NTP vulnerabilities. 2015-04-08 16:52:55.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36857 Identifying and Mitigating the Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37485&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20the%20Cisco%20IOS%20Software%20and%20IOS%20XE%20Software%20mDNS%20Gateway%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2015-03-25 16:01:29.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37485 Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000, Cisco ISR 4400, and Cisco Cloud Services 1000v Series Routers http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37486&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Multiple%20Vulnerabilities%20in%20Cisco%20IOS%20XE%20Software%20for%20Cisco%20ASR%201000,%20Cisco%20ISR%204400,%20and%20Cisco%20Cloud%20Services%201000v%20Series%20Routers%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2015-03-25 16:01:24.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37486 Identifying and Mitigating Exploitation of the Cisco IOS Software and IOS XE Software TCP Packet Memory Leak Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37433&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20and%20IOS%20XE%20Software%20TCP%20Packet%20Memory%20Leak%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2015-03-25 16:01:21.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37433 Identifying and Mitigating Exploitation of the Cisco IOS Software UDP CIP Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37513&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20UDP%20CIP%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2015-03-25 16:01:16.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37513 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for March 2015 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37694&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20March%202015%26vs_k=1 This Applied Mitigation Bulletin has been updated with Sourcefire signature information. 2015-03-16 20:51:19.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37694 Identifying and Mitigating Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37541&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Multiple%20Vulnerabilities%20in%20Cisco%20TelePresence%20Video%20Communication%20Server,%20Cisco%20Expressway,%20and%20Cisco%20TelePresence%20Conductor%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2015-03-11 16:05:05.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37541 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for February 2015 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37368&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20February%202015%26vs_k=1 <p>Microsoft announced nine security bulletins that address 56 vulnerabilities as part of the monthly security bulletin release on February 10, 2015. A summary of these bulletins is on the Microsoft website at <a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-feb">http://technet.microsoft.com/en-us/security/bulletin/ms15-feb</a>. This document provides identification and mitigation techniques that administrators can deploy on Cisco network devices.</p> <p>The vulnerabilities that have a client software attack vector, can be exploited locally on the vulnerable device, require user interaction, or can be exploited using web-based attacks (these include but are not limited to cross-site scripting, phishing, and web-based email threats) or email attachments are in the following list:</p> <ul> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-009">MS15-009</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-010">MS15-010</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-011">MS15-011</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-012">MS15-012</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-013">MS15-013</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-014">MS15-014</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-015">MS15-015</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-016">MS15-016</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-017">MS15-017</a></li> </ul> <p>The vulnerabilities that have a network mitigation, including web and email security issues, are in the following list. Cisco devices provide several countermeasures for the vulnerabilities that have a network attack vector, which will be discussed in detail later in this document.</p> <ul> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-009">MS15-009</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-010">MS15-010</a></li> <li><a href="http://technet.microsoft.com/en-us/security/bulletin/ms15-015">MS15-015</a></li> </ul> <p>Information about affected and unaffected products is available in the respective Microsoft advisories and the Cisco Alerts that are referenced in <a href="http://www.cisco.com/web/about/security/intelligence/ERP_feb15.html">Cisco Event Response: Microsoft Security Bulletin Release for February 2015</a>.</p> <p>In addition, multiple Cisco products use Microsoft operating systems as their base operating system. Cisco products that may be affected by the vulnerabilities described in the referenced Microsoft advisories are detailed in the "Associated Products" table in the "Product Sets" section.</p> 2015-02-10 20:22:27.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=37368 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for January 2015 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36907&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20January%202015%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2015-01-13 18:49:51.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36907 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for December 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36541&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20December%202014%26vs_k=1 Sourcefire signature information is available for the December 2014 Microsoft Security Bulletins. 2014-12-09 22:23:40.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36541 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for November 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36231&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20November%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-11-11 18:45:40.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=36231 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for October 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35915&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20October%202014%26vs_k=1 This Applied Mitigation Bulletin has been updated with Cisco Sourcefire Snort signature information. 2014-10-16 16:52:49.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35915 Identifying and Mitigating Exploitation of the GNU Bash Environment Variable Command Injection Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35836&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20GNU%20Bash%20Environment%20Variable%20Command%20Injection%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-09-26 01:07:59.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35836 Identifying and Mitigating Exploitation of the Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35259&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20Session%20Initiation%20Protocol%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-09-24 16:04:58.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35259 Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35023&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Multiple%20Vulnerabilities%20in%20Cisco%20IOS%20Software%20Multicast%20Domain%20Name%20System%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-09-24 16:02:54.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35023 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for September 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35442&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20September%202014%26vs_k=1 Added Cisco Sourcefire Signature information. 2014-09-09 19:16:23.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35442 Identifying and Mitigating Exploitation of the Cisco Unified Computing System E-Series Cisco Integrated Management Controller SSH Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35308&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20Unified%20Computing%20System%20E-Series%20Cisco%20Integrated%20Management%20Controller%20SSH%20Denial%20of%20Service%20Vulnerability%26vs_k=1 This Applied Mitigation Bulletin is a companion document to the PSIRT Security Advisory <em>Cisco Unified Computing System E-Series Blade Servers Cisco Integrated Management Controller SSH Denial of Service Vulnerability</em> and provides identification and mitigation techniques that administrators can deploy on Cisco network devices. 2014-09-08 16:01:49.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35308 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for August 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35222&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20August%202014%26vs_k=1 Sourcefire signature information has been added to this Applied Mitigation Bulletin. 2014-08-21 19:00:25.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35222 Identifying and Mitigating Exploitation of the Cisco IOS Software and Cisco IOS XE Software EnergyWise Crafted Packet Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34962&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20and%20Cisco%20IOS%20XE%20Software%20EnergyWise%20Crafted%20Packet%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-08-06 16:01:23.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34962 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for July 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34750&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20July%202014%26vs_k=1 Cisco Applied Mitigation Bulletin revised to add Sourcefire signature information. 2014-07-09 12:25:26.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34750 Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco Unified Communications Domain Manager http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Multiple%20Vulnerabilities%20in%20Cisco%20Unified%20Communications%20Domain%20Manager%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-07-02 16:04:41.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 Identifying and Mitigating Exploitation of the Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33986&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20XR%20Software%20IPv6%20Malformed%20Packet%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-06-11 16:01:15.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33986 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for June 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34553&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20June%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-06-10 17:57:47.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34553 Applied Mitigation Bulletin: Microsoft Security Bulletin Release for May 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34173&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20May%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-05-13 19:45:34.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34173 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for April 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33520&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20April%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-04-08 17:17:16.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33520 Mitigation of the Schneider Electric Serial Modbus Driver Buffer Overflow http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33630&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Mitigation%20of%20the%20Schneider%20Electric%20Serial%20Modbus%20Driver%20Buffer%20Overflow%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-04-07 17:55:42.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33630 Identifying and Mitigating Exploitation of the Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32537&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20Session%20Initiation%20Protocol%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Sourcefire IPS signature information is available. 2014-03-27 17:14:51.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32537 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for March 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33172&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20March%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-03-11 17:16:51.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=33172 Identifying and Mitigating Exploitation of Multiple Vulnerabilities in Cisco Wireless LAN Controllers http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30830&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20Multiple%20Vulnerabilities%20in%20Cisco%20Wireless%20LAN%20Controllers%26vs_k=1 <p> Cisco Applied Mitigation Bulletin initial public release. </p> 2014-03-05 16:02:43.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30830 Mitigation and Identification of the Unauthorized Access Vulnerability in Cisco Unified SIP Phone 3905 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32559&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Mitigation%20and%20Identification%20of%20the%20Unauthorized%20Access%20Vulnerability%20in%20Cisco%20Unified%20SIP%20Phone%203905%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-02-19 16:02:29.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32559 Mitigation of the Cisco UCS Director Default Credentials Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32757&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Mitigation%20of%20the%20Cisco%20UCS%20Director%20Default%20Credentials%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-02-19 16:02:03.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32757 Mitigation and Identification of Multiple Vulnerabilities in Cisco IPS Software http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32605&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Mitigation%20and%20Identification%20of%20Multiple%20Vulnerabilities%20in%20Cisco%20IPS%20Software%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-02-19 16:01:54.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32605 Microsoft Security Bulletin Release for February 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32679&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Microsoft%20Security%20Bulletin%20Release%20for%20February%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2014-02-11 18:55:52.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32679 Identifying and Mitigating Exploitation of the Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20TelePresence%20Video%20Communication%20Server%20SIP%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-01-22 16:00:17.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32409 Identifying and Mitigating the Multiple Vulnerabilities in Cisco Secure Access Control System http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32120&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20the%20Multiple%20Vulnerabilities%20in%20Cisco%20Secure%20Access%20Control%20System%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-01-15 16:16:21.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32120 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for January 2014 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32318&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20January%202014%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2014-01-14 18:22:22.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32318 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for December 2013 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31928&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20December%202013%26vs_k=1 Corrected list of Microsoft Security Bulletins.<br /> 2014-01-02 17:55:17.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31928 Identifying and Mitigating Exploitation of the Siemens SINAMICS S/G Authentication Bypass Unauthorized Access Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32057&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Siemens%20SINAMICS%20S/G%20Authentication%20Bypass%20Unauthorized%20Access%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2013-12-06 22:56:05.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=32057 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for November 2013 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31544&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20November%202013%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2013-11-12 19:07:44.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31544 Identifying and Mitigating Exploitation of the Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31516&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20Software%20Session%20Initiation%20Protocol%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release. 2013-11-06 16:08:09.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31516 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for October 2013 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31115&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20October%202013%26vs_k=1 This document was updated to include the latest IPS Signature event data from October 16, 2013. 2013-10-16 13:41:25.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31115 Identifying and Mitigating Exploitation of the Cisco IOS XR Software Memory Exhaustion Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30921&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20IOS%20XR%20Software%20Memory%20Exhaustion%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2013-10-02 16:02:54.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30921 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for July 2013 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=29808&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20July%202013%26vs_k=1 IPS signature event data from Cisco Remote Management Services is available for IPS signatures from July 23, 2013. 2013-09-28 06:29:46.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=29808 Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin Release for September 2013 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30519&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Applied%20Mitigation%20Bulletin:%20Microsoft%20Security%20Bulletin%20Release%20for%20September%202013%26vs_k=1 IPS signature event data from Cisco Remote Management Services is available for IPS signatures from September 24, 2013. 2013-09-25 17:25:54.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30519 Identifying and Mitigating Exploitation of Cisco IOS Software RSVP Interface Queue Wedge Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30053&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20Cisco%20IOS%20Software%20RSVP%20Interface%20Queue%20Wedge%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2013-09-25 16:13:03.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30053 Identifying and Mitigating Exploitation of Cisco IOS Software RSVP Interface Queue Wedge Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=30053&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20Cisco%20IOS%20Software%20RSVP%20Interface%20Queue%20Wedge%20Vulnerability%26vs_k=1 2013-09-25 09:14:39.0 http://tools.cisco.com/security/center/viewAlert.x?alertId=30053 Identifying and Mitigating Exploitation of the Cisco Prime Central Unauthenticated Username and Password Enumeration Vulnerability http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30636&vs_f=Cisco%20Applied%20Mitigation%20Bulletins%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Identifying%20and%20Mitigating%20Exploitation%20of%20the%20Cisco%20Prime%20Central%20Unauthenticated%20Username%20and%20Password%20Enumeration%20Vulnerability%26vs_k=1 Cisco Applied Mitigation Bulletin initial public release 2013-09-18 16:04:11.0 http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30636