Security News > 2020 > November > Critical vulnerabilities in Cisco Security Manager fixed, researcher discloses PoCs
Cisco has patched two vulnerabilities in its Cisco Security Manager solution, both of which could allow unauthenticated, remote attackers to gain access to sensitive information on an affected system.
Those are part of a batch of twelve vulnerabilities flagged in July 2020 by Florian Hauser, a security researcher and red teamer at Code White.
Cisco Security Manager is a security management application that provides insight into and control of Cisco security and network devices deployed by enterprises - security appliances, intrusion prevention systems, firewalls, routers, switches, etc.
Cisco has also simultaneously announced that it will fix multiple Java deserialization vulnerabilities in the upcoming v4.23 of the Cisco Security Manager solution.
The company's Product Security Incident Response Team has noted that public announcements about all these vulnerabilities are available, but that they are "Not aware" of instances of actual malicious use in the wild.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/oXirgwENL4M/
Related news
- Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities (source)
- Cisco fixes ClamAV vulnerability with available PoC and critical Meeting Management flaw (source)
- Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI (source)
- MUT-1244 targeting security researchers, red teamers, and threat actors (source)
- Critical security hole in Apache Struts under exploit (source)
- CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List (source)
- Adobe warns of critical ColdFusion bug with PoC exploit code (source)
- Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers (source)
- The ongoing evolution of the CIS Critical Security Controls (source)
- SAP fixes critical vulnerabilities in NetWeaver application servers (source)