Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs - The Hacker News

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review.

The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode.

"These vulnerabilities were found during internal security testing using existing testing processes as well as frontier AI models [...] and are not known to be actively exploited," Cisco said, urging customers to apply the necessary updates for optimal protection.

The vulnerabilities impacting Catalyst SD-WAN Software are listed below -

The issues have been addressed in the following versions of Cisco Catalyst SD-WAN Software -

The vulnerabilities impacting IOS XE Software relate to improper access control, command injection, and improper input validation -