Security News > 2021 > April > Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers

Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers
2021-04-08 21:07

Cisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models.

The three Cisco router models and one VPN firewall device are of varying age and have reached "End of life" and will not be patched, according to Cisco.

"Cisco has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process," the company wrote.

On Wednesday, Cisco also warned of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software.

"Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system," Cisco wrote.

"[These] vulnerabilities affect Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software," Cisco wrote.


News URL

https://threatpost.com/zero-day-bug-soho-routers/165321/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Cisco 4441 231 3130 1877 614 5852