Cisco
Security flaws and news about Cisco, from official sources.
3 articles · 3 actively exploited
VULNERABILITY · HIGH
Attackers exploit Cisco ASA and FTD VPN flaw to force firewalls to reload
Attackers are crashing Cisco Secure Firewall ASA and FTD devices through a flaw in the Remote Access SSL VPN service. No login is needed, and Cisco has released fixed software.
VULNERABILITY · CRITICAL
Cisco Secure Email Gateway flaw allows root command execution
A critical path traversal flaw in Cisco Secure Email Gateway lets an unauthenticated remote attacker write files and run commands as root via a crafted email attachment. CISA lists it as actively exploited, and a patch is available.
VULNERABILITY · HIGH
Cisco BroadWorks flaw exposes sensitive files
An XML external entity flaw in Cisco BroadWorks lets remote attackers read configuration data without logging in. CISA lists it as actively exploited, and a fix is available.