□ 개요
o Cisco社는 자사 제품에서 발생하는 취약점을 해결한 보안 업데이트 발표 [1]~[3]
o 영향을 받는 버전을 사용 중인 사용자는 해결 방안에 따라 최신 버전으로 업데이트 권고
□ 설명
o Cisco IOS XR Software에서 발생하는 Improper Control of a Resource Through its Lifetime 취약점(CVE-2026-20274) [1][4]
o Cisco IOS XR Software에서 발생하는 Incorrect Calculation 취약점(CVE-2026-20275) [1][5]
o Cisco IOS XR Software에서 발생하는 Insufficient Control Flow Management 취약점(CVE-2026-20276) [1][6]
o Cisco IOS XR Software에서 발생하는 Protection Mechanism Failure 취약점(CVE-2026-20277) [1][7]
o Cisco IOS XR Software에서 발생하는 Improper Neutralization 취약점(CVE-2026-20278) [1][8]
o Cisco IOS XR Software에서 발생하는 Improper Access Control 취약점(CVE-2026-20279) [1][9]
o Cisco IOS XR Software에서 발생하는 Improper Check or Handling of Exceptional Conditions 취약점(CVE-2026-20280) [1][10]
o Cisco BroadWorks에서 발생하는 Improper Restriction of XML External Entity Reference 취약점(CVE-2026-20320) [2][11]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20337) [3][12]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Double Free 취약점(CVE-2026-20338) [3][13]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Integer Overflow or Wraparound 취약점(CVE-2026-20339) [3][14]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Stack-based Buffer Overflow 취약점(CVE-2026-20345) [3][15]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20346) [3][16]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20347) [3][17]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20348) [3][18]
□ 영향을 받는 제품 및 해결 방안
| 취약점 | 제품명 | 영향받는 버전 | 해결 버전 |
|---|---|---|---|
| CVE-2026-20274 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20274 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20274 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20274 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20274 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20274 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20274 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20274 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20274 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20274 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20274 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20274 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20274 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20274 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20275 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20275 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20275 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20275 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20275 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20275 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20275 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20275 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20275 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20275 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20275 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20275 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20275 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20275 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20276 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20276 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20276 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20276 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20276 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20276 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20276 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20276 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20276 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20276 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20276 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20276 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20276 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20276 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20277 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20277 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20277 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20277 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20277 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20277 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20277 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20277 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20277 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20277 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20277 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20277 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20277 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20277 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20278 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20278 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20278 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20278 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20278 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20278 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20278 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20278 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20278 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20278 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20278 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20278 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20278 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20278 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20279 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20279 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20279 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20279 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20279 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20279 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20279 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20279 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20279 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20279 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20279 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20279 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20279 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20279 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20280 | IOS XR Software | 7.3 | 7.3.2 |
| CVE-2026-20280 | IOS XR Software | 7.9 | 7.9.2, 7.9.21 |
| CVE-2026-20280 | IOS XR Software | 7.10 | 7.10.2 |
| CVE-2026-20280 | IOS XR Software | 7.11 | 7.11.2, 7.11.21 |
| CVE-2026-20280 | IOS XR Software | 24.1 | 24.1.2 |
| CVE-2026-20280 | IOS XR Software | 24.2 | 24.2.2, 24.2.21 |
| CVE-2026-20280 | IOS XR Software | 24.3 | 24.3.2 |
| CVE-2026-20280 | IOS XR Software | 24.4 | 24.4.2 |
| CVE-2026-20280 | IOS XR Software | 25.1 | 25.1.2 |
| CVE-2026-20280 | IOS XR Software | 25.2 | 25.2.21 |
| CVE-2026-20280 | IOS XR Software | 25.4 | 25.4.1, 25.4.2 |
| CVE-2026-20280 | IOS XR Software | 26.1 | 26.1.2 |
| CVE-2026-20280 | IOS XR Software | 26.2 | 26.2.1, 26.2.2 |
| CVE-2026-20280 | IOS XR Software | 26.3 | 26.3.1 |
| CVE-2026-20320 | BroadWorks Application Delivery Platform | RI.2026.07 미만 | RI.2026.07 이상 |
| CVE-2026-20320 | BroadWorks Application Server | RI.2026.07 미만 | RI.2026.07 이상 |
| CVE-2026-20320 | BroadWorks Profile Server | RI.2026.07 미만 | RI.2026.07 이상 |
| CVE-2026-20320 | BroadWorks Xtended Services Platform | RI.2026.07 미만 | RI.2026.07 이상 |
| CVE-2026-20337 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20337 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20337 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20337 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20338 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20338 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20338 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20338 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20339 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20339 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20339 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20339 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20345 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20345 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20345 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20345 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20346 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20346 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20346 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20346 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20347 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20347 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20347 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20347 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
| CVE-2026-20348 | Secure Endpoint Connector for Linux | 1.29.2 미만 | 1.29.2 이상 |
| CVE-2026-20348 | Secure Endpoint Connector for Mac | 1.27.4 미만 | 1.27.4 이상 |
| CVE-2026-20348 | Secure Endpoint Connector for Windows | 7.5.24.21780 미만 | 7.5.24.21780 이상 |
| CVE-2026-20348 | Secure Endpoint Connector for Windows | 8.6.3 미만 | 8.6.3 이상 |
※ 하단의 참고 사이트를 확인하여 업데이트 수행 [1]~[3]
□ 참고사이트
[1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
[2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt
[3] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
[4] https://nvd.nist.gov/vuln/detail/CVE-2026-20274
[5] https://nvd.nist.gov/vuln/detail/CVE-2026-20275
[6] https://nvd.nist.gov/vuln/detail/CVE-2026-20276
[7] https://nvd.nist.gov/vuln/detail/CVE-2026-20277
[8] https://nvd.nist.gov/vuln/detail/CVE-2026-20278
[9] https://nvd.nist.gov/vuln/detail/CVE-2026-20279
[10] https://nvd.nist.gov/vuln/detail/CVE-2026-20280
[11] https://nvd.nist.gov/vuln/detail/CVE-2026-20320
[12] https://nvd.nist.gov/vuln/detail/CVE-2026-20337
[13] https://nvd.nist.gov/vuln/detail/CVE-2026-20338
[14] https://nvd.nist.gov/vuln/detail/CVE-2026-20339
[15] https://nvd.nist.gov/vuln/detail/CVE-2026-20345
[16] https://nvd.nist.gov/vuln/detail/CVE-2026-20346
[17] https://nvd.nist.gov/vuln/detail/CVE-2026-20347
[18] https://nvd.nist.gov/vuln/detail/CVE-2026-20348
□ 문의사항
o 한국인터넷진흥원 사이버민원센터 : 국번없이 118
□ 작성 : 디지털위협대응본부 취약점관리센터
문의하기