Cisco’s Midweek Meltdown: Patching Eight Flaws to Keep Hackers at Bay
Cisco patches eight vulnerabilities in IOS XR, including six high-severity bugs. The most severe, CVE-2024-20398, allows attackers to elevate privileges to root. CVE-2024-20304 could cause a denial-of-service. Two flaws in Routed Passive Optical Network controller software enable command injection. Cisco is unaware of any active exploitation of these vulnerabilities.
Hot Take:
Looks like Cisco’s IOS XR network operating system is having a bug party, and hackers are not invited! Patches for everyone!
Key Points:
- Cisco patches eight vulnerabilities in IOS XR, including six high-severity bugs.
- The most severe flaw (CVE-2024-20398) has a CVSS score of 8.8 and allows privilege escalation to root.
- Another critical bug (CVE-2024-20304) affects the Mtrace2 feature, potentially leading to a DoS condition.
- Two high-severity command injection vulnerabilities impact the Routed PON controller, allowing root command execution.
- No known exploitation of these vulnerabilities in the wild as of yet, according to Cisco.
Already a member? Log in here