Old vulnerabilities in Cisco products actively exploited in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-12240 | Unauthenticated RCE via DHCP Relay in Cisco IOS and IOS XE Software | 9.8 | 14% | KEV | KEV |
| CVE-2018-0125 | Unauthenticated RCE in Cisco RV132W and RV134W VPN Routers | 9.8 | 55% | KEV | KEV |
| CVE-2018-0147 | Unauthenticated Java Deserialization RCE in Cisco Secure Access Control System | 9.8 | 18% | KEV | KEV |
| CVE-2018-0171 | Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install | 9.8 | 99% | KEV | KEV |
| CVE-2021-1497 | Root Command Injection in Cisco HyperFlex HX Installer Virtual Machine | 9.8 | 100% | KEVPoC | KEV |
From the original article
1 min read at securityaffairs.com
IT giant Cisco is warning of threat actors exploiting many old vulnerabilities in attacks in the wild. Cisco has updated multiple security advisories to warn of the active exploitation of several old vulnerabilities impacting its products. The bugs, some of which are rated as ‘critical’ severity, impact Cisco IOS, NX-OS, and HyperFlex software.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.