서비스마켓플레이스솔루션요금비즈니스더보기
홈
더보기
공지사항

[보안 업데이트] Cisco 제품 보안 업데이트 권고

[보안 업데이트] Cisco 제품 보안 업데이트 권고

  • 보안

  • 2026.09.09

안녕하세요.
Kakao Cloud 입니다.

 

개요
o Cisco社는 자사 제품에서 발생하는 취약점을 해결한 보안 업데이트 발표 [1]~[3]
o 영향을 받는 버전을 사용 중인 사용자는 해결 방안에 따라 최신 버전으로 업데이트 권고

 

설명
o Cisco IOS XR Software에서 발생하는 Improper Control of a Resource Through its Lifetime 취약점(CVE-2026-20274) [1][4]
o Cisco IOS XR Software에서 발생하는 Incorrect Calculation 취약점(CVE-2026-20275) [1][5]
o Cisco IOS XR Software에서 발생하는 Insufficient Control Flow Management 취약점(CVE-2026-20276) [1][6]
o Cisco IOS XR Software에서 발생하는 Protection Mechanism Failure 취약점(CVE-2026-20277) [1][7]
o Cisco IOS XR Software에서 발생하는 Improper Neutralization 취약점(CVE-2026-20278) [1][8]
o Cisco IOS XR Software에서 발생하는 Improper Access Control 취약점(CVE-2026-20279) [1][9]
o Cisco IOS XR Software에서 발생하는 Improper Check or Handling of Exceptional Conditions 취약점(CVE-2026-20280) [1][10]
o Cisco BroadWorks에서 발생하는 Improper Restriction of XML External Entity Reference 취약점(CVE-2026-20320) [2][11]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20337) [3][12]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Double Free 취약점(CVE-2026-20338) [3][13]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Integer Overflow or Wraparound 취약점(CVE-2026-20339) [3][14]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Stack-based Buffer Overflow 취약점(CVE-2026-20345) [3][15]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20346) [3][16]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20347) [3][17]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20348) [3][18]

 

영향을 받는 제품 및 해결 방안

취약점제품명영향받는 버전해결 버전
CVE-2026-20274IOS XR Software7.37.3.2
CVE-2026-20274IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20274IOS XR Software7.107.10.2
CVE-2026-20274IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20274IOS XR Software24.124.1.2
CVE-2026-20274IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20274IOS XR Software24.324.3.2
CVE-2026-20274IOS XR Software24.424.4.2
CVE-2026-20274IOS XR Software25.125.1.2
CVE-2026-20274IOS XR Software25.225.2.21
CVE-2026-20274IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20274IOS XR Software26.126.1.2
CVE-2026-20274IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20274IOS XR Software26.326.3.1
CVE-2026-20275IOS XR Software7.37.3.2
CVE-2026-20275IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20275IOS XR Software7.107.10.2
CVE-2026-20275IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20275IOS XR Software24.124.1.2
CVE-2026-20275IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20275IOS XR Software24.324.3.2
CVE-2026-20275IOS XR Software24.424.4.2
CVE-2026-20275IOS XR Software25.125.1.2
CVE-2026-20275IOS XR Software25.225.2.21
CVE-2026-20275IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20275IOS XR Software26.126.1.2
CVE-2026-20275IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20275IOS XR Software26.326.3.1
CVE-2026-20276IOS XR Software7.37.3.2
CVE-2026-20276IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20276IOS XR Software7.107.10.2
CVE-2026-20276IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20276IOS XR Software24.124.1.2
CVE-2026-20276IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20276IOS XR Software24.324.3.2
CVE-2026-20276IOS XR Software24.424.4.2
CVE-2026-20276IOS XR Software25.125.1.2
CVE-2026-20276IOS XR Software25.225.2.21
CVE-2026-20276IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20276IOS XR Software26.126.1.2
CVE-2026-20276IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20276IOS XR Software26.326.3.1
CVE-2026-20277IOS XR Software7.37.3.2
CVE-2026-20277IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20277IOS XR Software7.107.10.2
CVE-2026-20277IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20277IOS XR Software24.124.1.2
CVE-2026-20277IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20277IOS XR Software24.324.3.2
CVE-2026-20277IOS XR Software24.424.4.2
CVE-2026-20277IOS XR Software25.125.1.2
CVE-2026-20277IOS XR Software25.225.2.21
CVE-2026-20277IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20277IOS XR Software26.126.1.2
CVE-2026-20277IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20277IOS XR Software26.326.3.1
CVE-2026-20278IOS XR Software7.37.3.2
CVE-2026-20278IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20278IOS XR Software7.107.10.2
CVE-2026-20278IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20278IOS XR Software24.124.1.2
CVE-2026-20278IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20278IOS XR Software24.324.3.2
CVE-2026-20278IOS XR Software24.424.4.2
CVE-2026-20278IOS XR Software25.125.1.2
CVE-2026-20278IOS XR Software25.225.2.21
CVE-2026-20278IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20278IOS XR Software26.126.1.2
CVE-2026-20278IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20278IOS XR Software26.326.3.1
CVE-2026-20279IOS XR Software7.37.3.2
CVE-2026-20279IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20279IOS XR Software7.107.10.2
CVE-2026-20279IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20279IOS XR Software24.124.1.2
CVE-2026-20279IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20279IOS XR Software24.324.3.2
CVE-2026-20279IOS XR Software24.424.4.2
CVE-2026-20279IOS XR Software25.125.1.2
CVE-2026-20279IOS XR Software25.225.2.21
CVE-2026-20279IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20279IOS XR Software26.126.1.2
CVE-2026-20279IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20279IOS XR Software26.326.3.1
CVE-2026-20280IOS XR Software7.37.3.2
CVE-2026-20280IOS XR Software7.97.9.2, 7.9.21
CVE-2026-20280IOS XR Software7.107.10.2
CVE-2026-20280IOS XR Software7.117.11.2, 7.11.21
CVE-2026-20280IOS XR Software24.124.1.2
CVE-2026-20280IOS XR Software24.224.2.2, 24.2.21
CVE-2026-20280IOS XR Software24.324.3.2
CVE-2026-20280IOS XR Software24.424.4.2
CVE-2026-20280IOS XR Software25.125.1.2
CVE-2026-20280IOS XR Software25.225.2.21
CVE-2026-20280IOS XR Software25.425.4.1, 25.4.2
CVE-2026-20280IOS XR Software26.126.1.2
CVE-2026-20280IOS XR Software26.226.2.1, 26.2.2
CVE-2026-20280IOS XR Software26.326.3.1
CVE-2026-20320BroadWorks Application Delivery PlatformRI.2026.07 미만RI.2026.07 이상
CVE-2026-20320BroadWorks Application ServerRI.2026.07 미만RI.2026.07 이상
CVE-2026-20320BroadWorks Profile ServerRI.2026.07 미만RI.2026.07 이상
CVE-2026-20320BroadWorks Xtended Services PlatformRI.2026.07 미만RI.2026.07 이상
CVE-2026-20337Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20337Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20337Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20337Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20338Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20338Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20338Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20338Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20339Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20339Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20339Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20339Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20345Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20345Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20345Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20345Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20346Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20346Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20346Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20346Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20347Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20347Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20347Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20347Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상
CVE-2026-20348Secure Endpoint Connector for Linux1.29.2 미만1.29.2 이상
CVE-2026-20348Secure Endpoint Connector for Mac1.27.4 미만1.27.4 이상
CVE-2026-20348Secure Endpoint Connector for Windows7.5.24.21780 미만7.5.24.21780 이상
CVE-2026-20348Secure Endpoint Connector for Windows8.6.3 미만8.6.3 이상

※ 하단의 참고 사이트를 확인하여 업데이트 수행 [1]~[3]

 

참고사이트
[1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
[2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt
[3] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
[4] https://nvd.nist.gov/vuln/detail/CVE-2026-20274
[5] https://nvd.nist.gov/vuln/detail/CVE-2026-20275
[6] https://nvd.nist.gov/vuln/detail/CVE-2026-20276
[7] https://nvd.nist.gov/vuln/detail/CVE-2026-20277
[8] https://nvd.nist.gov/vuln/detail/CVE-2026-20278
[9] https://nvd.nist.gov/vuln/detail/CVE-2026-20279
[10] https://nvd.nist.gov/vuln/detail/CVE-2026-20280
[11] https://nvd.nist.gov/vuln/detail/CVE-2026-20320
[12] https://nvd.nist.gov/vuln/detail/CVE-2026-20337
[13] https://nvd.nist.gov/vuln/detail/CVE-2026-20338
[14] https://nvd.nist.gov/vuln/detail/CVE-2026-20339
[15] https://nvd.nist.gov/vuln/detail/CVE-2026-20345
[16] https://nvd.nist.gov/vuln/detail/CVE-2026-20346
[17] https://nvd.nist.gov/vuln/detail/CVE-2026-20347
[18] https://nvd.nist.gov/vuln/detail/CVE-2026-20348

 

더욱 안전하고 편리한 서비스를 제공하기 위해 항상 노력하겠습니다.
감사합니다.

@카카오클라우드팀 드림

목록으로