思科于 2018 年 9 月 26 日发布了半年度 Cisco IOS 和 IOS XE 软件安全漏洞公告捆绑出版物。该出版物包含 12 个 Cisco 安全漏洞公告，描述了 Cisco IOS 软件和 Cisco IOS XE 软件中的 13 个漏洞。其中一个公告描述了一个也存在于 Cisco ASA 软件中的漏洞。思科已发布了用于解决这些漏洞的软件更新。

🎉 **漏洞影响范围:** 这些漏洞影响 Cisco IOS 软件和 Cisco IOS XE 软件，其中 4 个漏洞影响两者，7 个漏洞仅影响 Cisco IOS XE 软件，1 个漏洞影响 Cisco IOS XE 软件和 Cisco ASA 软件。值得注意的是，这些漏洞不影响 Cisco NX-OS 软件。

🛡️ **漏洞等级:** 13 个漏洞中，所有漏洞的安全影响等级 (SIR) 均为高。攻击者成功利用这些漏洞可能会导致设备权限提升或拒绝服务 (DoS) 攻击。

🔧 **漏洞解决方法:** 思科已发布了软件更新以解决这些漏洞。建议用户尽快更新到最新版本，以确保设备安全。

🔍 **漏洞检测工具:** 思科提供了 Cisco IOS 软件检查器，用户可以使用该工具快速确定特定版本的 Cisco IOS 或 IOS XE 软件是否受到一个或多个漏洞的影响。

🤝 **用户反馈:** 思科鼓励用户反馈有关安全漏洞的信息，并积极参与安全漏洞修复工作。

Cisco released its semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication on September 26, 2018. In direct response to customer feedback, Cisco releases bundles of Cisco IOS and IOS XE Software Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.The September 26, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication includes 12 Cisco Security Advisories that describe 13 vulnerabilities in Cisco IOS Software and Cisco IOS XE Software. One of the advisories describes a vulnerability that also exists in Cisco ASA Software. Cisco has released software updates that address these vulnerabilities.All 13 of the vulnerabilities have a Security Impact Rating (SIR) of High. Successful exploitation of the vulnerabilities could allow an attacker to gain elevated privileges for an affected device or cause a denial of service (DoS) condition on an affected device.Four of the vulnerabilities affect both Cisco IOS Software and Cisco IOS XE Software. One of the vulnerabilities affects Cisco IOS Software and seven of the vulnerabilities affect Cisco IOS XE Software. One of the vulnerabilities affects Cisco IOS XE Software and Cisco ASA Software. Cisco has confirmed that none of the vulnerabilities affect Cisco NX-OS Software.To quickly determine if a specific Cisco IOS or IOS XE Software release is affected by one or more vulnerabilities, use the Cisco IOS Software Checker.