Critical bugs found in Cisco SD-WAN software – iTnews

Cisco has issued patches for multiple flaws in its SD-WAN products that could allow unauthennticated remote threat actors to attack vulnerable devices.
The network equipment vendor said one buffer overflow vulnerability that lets unauthenticated attackers run arbitrary code with root superuser privileges is due to incorrect handling of internet protocol traffic.
By sending specially crafted IP traffic through a vulnerable device, attackers could trigger a buffer overflow in the software, Cisco warned.
…

Click here to view the original article.