Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical
Want more insights like this?
Cisco disclosed 48 vulnerabilities across its firewall products, including two critical flaws scoring perfect 10s on the severity scale. The most dangerous bugs affect the Secure Firewall Management Center (FMC), allowing attackers to bypass authentication and gain root access through crafted HTTP requests or malicious Java objects.
The vulnerabilities impact Cisco's ASA firewalls, Secure FTD systems, and FMC management platforms. Nine additional flaws earned "high" severity ratings, mostly denial-of-service bugs plus SQL injection issues.
Experts warn these critical vulnerabilities could give attackers control over network security at a fundamental level, letting them modify firewall rules or disable protections across multiple devices. Nation-state groups have increasingly targeted edge devices as primary attack vectors. Cisco urges immediate updates.
Source: Dark Reading