Cisco Event Response Page
Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication
-
Cisco released its semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication on June 3, 2020. In direct response to customer feedback, Cisco releases bundles of Cisco IOS and IOS XE Software Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.
The June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication includes 23 Cisco Security Advisories that describe 25 vulnerabilities in Cisco IOS Software and Cisco IOS XE Software. Cisco has released software updates that address these vulnerabilities.
Of these advisories, 20 have a Security Impact Rating (SIR) of High. Three have a SIR of Critical.
One vulnerability affects Cisco IOS, IOS XE, IOS XR, and NX-OS Software. Five vulnerabilities affect both Cisco IOS and IOS XE Software. Six vulnerabilities affect Cisco IOS Software and 10 affect Cisco IOS XE Software. Three vulnerabilities affect the Cisco IOx application environment.
To quickly determine whether a specific Cisco IOS or IOS XE Software release is affected by one or more vulnerabilities, customers can use the Cisco Software Checker.
-
The following table identifies the Cisco Security Advisories that are in this bundled publication:
Related Resources
Cisco Security Vulnerability Policy
MITRE Common Vulnerabilities and Exposures
Common Vulnerability Scoring System and the Security Impact Rating