Cisco于2019年9月25日发布了半年一次的Cisco IOS和IOS XE软件安全公告捆绑出版物。该出版物包含12个Cisco安全公告，描述了Cisco IOS软件和Cisco IOS XE软件中的13个漏洞。Cisco已经发布了软件更新来解决这些漏洞。所有漏洞的安全影响等级（SIR）均为高。成功利用这些漏洞可能允许攻击者获得对受影响设备的未经授权的访问，对设备进行命令注入攻击，或导致设备出现拒绝服务（DoS）状况。

😄 **漏洞影响范围:** 两个漏洞影响Cisco IOS软件和Cisco IOS XE软件，两个漏洞影响Cisco IOS软件，八个漏洞影响Cisco IOS XE软件，一个漏洞影响Cisco IOx应用程序环境。Cisco已经确认，没有一个漏洞影响Cisco IOS XR软件或Cisco NX-OS软件。

😊 **漏洞安全影响等级:** 所有漏洞的安全影响等级（SIR）均为高。成功利用这些漏洞可能允许攻击者获得对受影响设备的未经授权的访问，对设备进行命令注入攻击，或导致设备出现拒绝服务（DoS）状况。

😎 **解决方案:** Cisco已经发布了软件更新来解决这些漏洞。建议用户尽快更新其设备以修复这些漏洞。

🧐 **如何确定受影响的软件版本:** 用户可以使用Cisco IOS软件检查器快速确定特定Cisco IOS或IOS XE软件版本是否受到一个或多个漏洞的影响。

Cisco released its semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication on September 25, 2019. In direct response to customer feedback, Cisco releases bundles of Cisco IOS and IOS XE Software Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.The September 25, 2019, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication includes 12 Cisco Security Advisories that describe 13 vulnerabilities in Cisco IOS Software and Cisco IOS XE Software. Cisco has released software updates that address these vulnerabilities.All vulnerabilities have a Security Impact Rating (SIR) of High. Successful exploitation of the vulnerabilities could allow an attacker to gain unauthorized access to, conduct a command injection attack on, or cause a denial of service (DoS) condition on an affected device.Two of the vulnerabilities affect both Cisco IOS Software and Cisco IOS XE Software. Two of the vulnerabilities affect Cisco IOS Software and eight of the vulnerabilities affect Cisco IOS XE Software. One of the vulnerabilities affects the Cisco IOx application environment. Cisco has confirmed that none of the vulnerabilities affect Cisco IOS XR Software or Cisco NX-OS Software.To quickly determine if a specific Cisco IOS or IOS XE Software release is affected by one or more vulnerabilities, use the Cisco IOS Software Checker.The following table identifies Cisco Security content that is associated with this bundled publication: