Cisco Patches Critical Vulnerabilities in IOS XE Software

guest · Sep 24, 2021

Cisco Patches Critical Vulnerabilities in IOS XE Software
September 23, 2021
https://www.securityweek.com/cisco-patches-critical-vulnerabilities-ios-xe-software

The most severe of these issues is CVE-2021-34770 (CVSS score of 10), which could lead to remote code execution without authentication, with administrator privileges.

Residing in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of IOS XE software for Catalyst 9000 wireless controllers, the bug can also be exploited to cause a denial of service (DoS) condition.
Click to expand...

Cisco also addressed a buffer overflow in IOS XE SD-WAN, which could be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges or cause a denial of service condition.

Tracked as CVE-2021-34727 (CVSS score of 9.8), the vulnerability exists due to insufficient bounds checking during the processing of traffic.
Click to expand...

The third critical vulnerability Cisco patched in IOS XE this week is CVE-2021-1619 (CVSS score of 9.8), which resides in the authentication, authorization, and accounting (AAA) function of the platform.

Cisco has released patches for all three vulnerabilities and says that it is not aware of them being exploited in the wild.
Click to expand...

guest · Oct 22, 2021

Cisco Releases Security Updates for IOS XE SD-WAN Software
October 21, 2021
https://us-cert.cisa.gov/ncas/curre...eases-security-updates-ios-xe-sd-wan-software

Cisco has released security updates to address a vulnerability in IOS XE SD-WAN Software. An authenticated local attacker could exploit this vulnerability to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page.

CISA encourages users and administrators to review Cisco Advisory cisco-sa-sd-wan-rhpbE34A and apply the necessary updates.
Click to expand...

Log in or Sign up

Cisco Patches Critical Vulnerabilities in IOS XE Software

guest Guest

guest Guest

Log in or Sign up

Cisco Patches Critical Vulnerabilities in IOS XE Software

guest Guest

guest Guest

Useful Searches