Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2017-11-16	CVE-2017-12337	Improper Authentication vulnerability in Cisco products A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. network low complexity cisco CWE-287 critical	9.8