Security News > 2020 > November > Critical vulnerabilities in Cisco Security Manager fixed, researcher discloses PoCs
Cisco has patched two vulnerabilities in its Cisco Security Manager solution, both of which could allow unauthenticated, remote attackers to gain access to sensitive information on an affected system.
Those are part of a batch of twelve vulnerabilities flagged in July 2020 by Florian Hauser, a security researcher and red teamer at Code White.
Cisco Security Manager is a security management application that provides insight into and control of Cisco security and network devices deployed by enterprises - security appliances, intrusion prevention systems, firewalls, routers, switches, etc.
Cisco has also simultaneously announced that it will fix multiple Java deserialization vulnerabilities in the upcoming v4.23 of the Cisco Security Manager solution.
The company's Product Security Incident Response Team has noted that public announcements about all these vulnerabilities are available, but that they are "Not aware" of instances of actual malicious use in the wild.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/oXirgwENL4M/
Related news
- Download: CIS Critical Security Controls v8.1 (source)
- Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now (source)
- Cisco warns of critical RCE zero-days in end of life IP phones (source)
- Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems (source)
- Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service (source)
- Food security: Accelerating national protections around critical infrastructure (source)
- GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges (source)
- Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms (source)
- Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers (source)
- Researchers find SQL injection to bypass airport TSA security checks (source)