□ 개요
o Cisco社는 자사 제품에서 발생하는 취약점을 해결한 보안 업데이트 발표 [1]~[3]
o 영향을 받는 버전을 사용 중인 사용자는 해결 방안에 따라 최신 버전으로 업데이트 권고
□ 설명
o Cisco IOS XR Software에서 발생하는 Improper Control of a Resource Through its Lifetime 취약점(CVE-2026-20274) [1][4]
o Cisco IOS XR Software에서 발생하는 Incorrect Calculation 취약점(CVE-2026-20275) [1][5]
o Cisco IOS XR Software에서 발생하는 Insufficient Control Flow Management 취약점(CVE-2026-20276) [1][6]
o Cisco IOS XR Software에서 발생하는 Protection Mechanism Failure 취약점(CVE-2026-20277) [1][7]
o Cisco IOS XR Software에서 발생하는 Improper Neutralization 취약점(CVE-2026-20278) [1][8]
o Cisco IOS XR Software에서 발생하는 Improper Access Control 취약점(CVE-2026-20279) [1][9]
o Cisco IOS XR Software에서 발생하는 Improper Check or Handling of Exceptional Conditions 취약점(CVE-2026-20280) [1][10]
o Cisco BroadWorks에서 발생하는 Improper Restriction of XML External Entity Reference 취약점(CVE-2026-20320) [2][11]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20337) [3][12]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Double Free 취약점(CVE-2026-20338) [3][13]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Integer Overflow or Wraparound 취약점(CVE-2026-20339) [3][14]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Stack-based Buffer Overflow 취약점(CVE-2026-20345) [3][15]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20346) [3][16]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20347) [3][17]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20348) [3][18]
□ 영향을 받는 제품 및 해결 방안
| 취약점 | 제품명 | 영향받는 버전 | 해결 버전 |
|---|---|---|---|
| CVE-2026-20274 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20274 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20274 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20274 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20274 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20274 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20274 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20274 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20274 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20274 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20274 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20274 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20274 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20274 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20275 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20275 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20275 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20275 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20275 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20275 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20275 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20275 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20275 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20275 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20275 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20275 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20275 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20275 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20276 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20276 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20276 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20276 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20276 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20276 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20276 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20276 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20276 | IOS XR Software | 25.1 | 25.1.2 |