Security News > 2020 > November > Critical vulnerabilities in Cisco Security Manager fixed, researcher discloses PoCs
Cisco has patched two vulnerabilities in its Cisco Security Manager solution, both of which could allow unauthenticated, remote attackers to gain access to sensitive information on an affected system.
Those are part of a batch of twelve vulnerabilities flagged in July 2020 by Florian Hauser, a security researcher and red teamer at Code White.
Cisco Security Manager is a security management application that provides insight into and control of Cisco security and network devices deployed by enterprises - security appliances, intrusion prevention systems, firewalls, routers, switches, etc.
Cisco has also simultaneously announced that it will fix multiple Java deserialization vulnerabilities in the upcoming v4.23 of the Cisco Security Manager solution.
The company's Product Security Incident Response Team has noted that public announcements about all these vulnerabilities are available, but that they are "Not aware" of instances of actual malicious use in the wild.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/oXirgwENL4M/
Related news
- HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities (source)
- Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities (source)
- Researchers Uncover Vulnerabilities in Open-Source AI and ML Models (source)
- Germany drafts law to protect researchers who find security flaws (source)
- Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems (source)
- Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418) (source)
- Cisco scores a perfect CVSS 10 with critical flaw in its wireless system (source)
- Patch Tuesday: Four Critical Vulnerabilities Paved Over (source)
- Critical vulnerabilities persist in high-risk sectors (source)
- Major security audit of critical FreeBSD components now available (source)