Cisco fixes a host of security holes, including latest Apache Struts flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-0423 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco… | 8.1 | 7% | ||
| CVE-2018-0435 | A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other… | 9.1 | 1% | ||
| CVE-2018-11776 | Apache Struts Remote Code Execution via Missing or Wildcard Namespace | 8.1 | 100% | KEVPoC ×5 | KEV |
From the original article
1 min read at helpnetsecurity.com
Cisco has plugged a heap of security holes – three of which are critical – in a variety of its products. A DoS and RCE vulnerability ( CVE-2018-0423 ) in the web-based management interface of three series of Cisco wireless VPN routers: RV110W, RV130W, and RV215W. Unfortunately, it has only been fixed in the RV130W series.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.