Cisco Industrial Wireless Software Flaw Let Attackers Run Command As Root User
Hackers target Cisco primarily due to its critical role in global network infrastructure and security. Cisco's devices are essential for protecting sensitive data and communications which makes them attractive targets for espionage.
Cybersecurity researchers at...
Cisco Identity Services Engine Flaw Bypass Authorization Mechanisms
Cisco has disclosed multiple vulnerabilities impacting its Identity Services Engine (ISE) software.
These vulnerabilities could allow authenticated, remote attackers to bypass authorization mechanisms or conduct a cross-site scripting (XSS) attack.
This advisory, released on...
CISA Warns of Cisco ASA & Roundcube Vulnerabilities Exploited in Wild
The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of two new vulnerabilities to its Known Exploited Vulnerabilities Catalog.
These vulnerabilities in widely used technologies are actively exploited by malicious actors, posing significant...
Cisco ATA 190 Telephone Adapter Flaw Exposes Devices To Remote Takeover
Cisco has issued a critical security advisory concerning multiple vulnerabilities in its ATA 190 Series Analog Telephone Adapters.
These vulnerabilities could potentially allow remote attackers to execute arbitrary code, posing significant risks to affected...
Cisco Small Business Routers Vulnerabilities Allow Attacker Exploits It Remotely
In a recent security advisory, Cisco has disclosed multiple vulnerabilities affecting its Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers.
Additionally, Cisco has issued a security advisory regarding a critical...
Cisco IOS XR Software Flaw Let Attackers Exhaust Memory, DoS & Elevate Privileges
A critical vulnerability has been identified in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software, posing significant risks to network stability and security.
This flaw allows unauthenticated, remote attackers to exhaust...
Cisco Web-Based Management Interface Vulnerability Allows Privilege Escalation
Cisco has disclosed a critical vulnerability in the JSON-RPC API feature used by the web-based management interfaces of several products, including Cisco Crosswork Network Services Orchestrator (NSO), Cisco Optical Site Manager, and Cisco RV340...
Cisco Systems Manager for Windows Vulnerability Let Attackers Escalate Privilege
Cisco Systems has issued a critical security advisory for a vulnerability in the Cisco Meraki Systems Manager (SM) Agent for Windows.
The flaw, identified as CVE-2024-20430, allows authenticated local attackers to execute arbitrary code...
Cisco to Acquire AI Application Security Platform Robust Intelligence
Cisco has announced its intent to acquire Robust Intelligence, a leader in AI application security. This acquisition aligns with Cisco's commitment to enhancing IT infrastructure and security in the face of AI's transformative potential,...
Cisco iPXE Signature Bypass Vulnerability Allow Attackers To Boot Unverified Software
Cisco has identified a critical vulnerability in the iPXE boot function of its IOS XR software. This vulnerability stems from insufficient image verification during the iPXE boot process, which could allow an authenticated, local...