Cisco issues five critical security patches among a batch of some 31 updates.
Amid a week punctuated by high-profile critical security vulnerability disclosures from Microsoft and Oracle, Cisco Systems today released 31 security patches that include critical ones for some of its router products.
In a tweet today announcing the Cisco release, US-CERT recommended users to "Patch ASAP!"
The critical flaws included in the patch release are a static default credential vuln in Cisco's Small Business RV110W Wireless-N VPN Firewall; a remote command execution vuln in its Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface; an authentication bypass vuln in its RV110W, RV130, RV130W, and RV215W routers; an arbitrary code execution vuln in its RV110W and RV215W Series routers; and a privilege escalation vuln in the Cisco Prime License Manager.
"An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of an affected system," US-CERT wrote it its advisory.
Read Cisco's advisories here.
Register now for this year's fully virtual Black Hat USA, scheduled to take place August 1–6, and get more information about the event on the Black Hat website. Click for detail on conference information and to register.
About the Author(s)
You May Also Like
Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024