Cisco critical flaw warning: These 10/10 severity bugs need patching now

guest · May 17, 2018

Cisco critical flaw warning: These 10/10 severity bugs need patching now
Cisco's software for managing software-defined networks has three critical, remotely exploitable vulnerabilities.
May 17, 2018
https://www.zdnet.com/article/cisco...g-these-1010-severity-bugs-need-patching-now/

Cisco is warning customers who use its new Digital Network Architecture (DNA) Center software to install newer releases that address three critical vulnerabilities that can give remote attackers access to enterprise networks.

Cisco discovered two of the bugs during an internal audit, one of which consisted of undocumented, hardcoded user credentials for the default administrative account of DNA Center.

"The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could exploit this vulnerability by submitting a crafted URL designed to exploit the issue. A successful exploit could allow the attacker to gain unauthenticated access to critical services, resulting in elevated privileges in DNA Center," Cisco notes.

Cisco released fixes for a total of 16 flaws yesterday to address four other high-severity issues and nine medium-severity flaws.
Click to expand...

guest · May 18, 2018

CISCO issued security updates to address three critical flaws in Cisco DNA Center
May 18, 2018
https://securityaffairs.co/wordpress/72631/security/cisco-dna-center-flaws.html

Cisco has issued security updates to address three critical vulnerabilities in its Digital Network Architecture (DNA) Center appliance.

The DNA Center is a network management and administration tool, experts discovered three vulnerabilities that could be exploited by remote unauthenticated attackers to take over the appliance.

The most severe issue is a static credentials vulnerability (CVE-2018-0222) affecting the DNA Center, the attacker can use them to completely take over the targeted appliance.
The second vulnerability tracked as CVE-2018-0271 affects the API gateway of the Cisco Digital Network Architecture (DNA) Center.

Cisco rolled out a security update to DNA Center via its System Updates tool, admins need to install the version 1.1.3 as soon as possible.
Click to expand...

Log in or Sign up

Cisco critical flaw warning: These 10/10 severity bugs need patching now

guest Guest

guest Guest

Log in or Sign up

Cisco critical flaw warning: These 10/10 severity bugs need patching now

guest Guest

guest Guest

Useful Searches