Cisco has released security updates to address multiple vulnerabilities, including several rated critical, across its products. Exploitation of these vulnerabilities could allow attackers to compromise affected systems.

Affected products include but are not limited to:

• Cisco Catalyst SD-WAN Software       

• Cisco Catalyst SD-WAN Manager

• Cisco IOS XE Software

• Cisco Secure Firewall Management Center Software

Security Risks

Successful exploitation of the identified vulnerabilities poses a critical security risk, as it could enable attackers to gain unauthorized access, execute arbitrary commands, and expose sensitive information, leading to system compromise and disruption of essential operations.

 For the full list of security patches released by Cisco, please refer to Cisco Security Advisories.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

• Follow and put in place the security updates shared by Cisco to lower the risk of vulnerability exploitation.

• Before updating or patching, please ensure that you have the latest backup that can easily be restored.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.
 

References

• https://sec.cloudapps.cisco.com/security/center/publicationListing.x

• Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

• Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

• Cisco Security portal