Security News > 2020 > April > High-Severity Cisco IOS XE Flaw Threatens SD-WAN Routers

The flaw exists in Cisco IOS XE. This Linux-based version of Cisco's Internetworking Operating System is used in Cisco software-defined wide area network routers.

In March, Cisco issued 24 patches tied to vulnerabilities in its IOS XE operating system.

The networking giant in January also released fixes for another high-severity glitch in the web user interface of Cisco IOS and Cisco IOS XE Software.

Last July, Cisco patched a high-severity vulnerability in IOS XE, which could enable a remote attacker to reconfigure or execute commands on impacted devices.

In August, a critical remote authentication-bypass vulnerability - with the highest possible severity level of 10 out of 10 on the CvSS scale - was found in the Cisco REST API virtual service container for Cisco IOS XE Software.

News URL

https://threatpost.com/cisco-ios-xe-flaw-sd-wan-routers/155319/