Cisco IOS Bugs Allow Unauthenticated, Remote DoS Attacks
Several Cisco products, including IOS, IOS XE, and AP software, need patching against various high-risk security vulnerabilities.
March 28, 2024
![Cisco sign outside of the company headquarters Cisco sign outside of the company headquarters](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt0fb47d8185883a82/6605d0d195c9f7aceecfa11d/Cisco_MTP_Alamy_Stock_Photo.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Cisco has released security updates for its flagship IOS and IOS XE operating system software for networking gear, as well as patches for its Access Point software.
The company's security update for Cisco IOS mitigates a total of 14 vulnerabilities, 10 of which are denial-of-service (DoS) bugs that can cause system crashes, unexpected reloads, and heap overflow. The most severe of the high-risk DoS bugs all allow exploitation by unauthenticated, remote attackers.
The other bugs allow privilege escalation, command injection, and access control list bypass.
Cisco's Access Point Software updates are for a secure boot bypass vulnerability (CVE-2024-20265), as well as another denial of service vulnerability (CVE-2024-20271). The former is "a vulnerability in the boot process [that] could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device," according to the advistory.
CISA issued a follow-up alert encouraging administrators to update their systems as soon as possible.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024