Whack-A-Mole: The Cisco IOS XE Software Vulnerabilities Edition
Unpack the latest cybersecurity saga involving two vulnerabilities in Cisco’s IOS XE Software. With one patch released and more on the way, it’s a high-stakes game of Whack-A-Mole.
Hot Take:
Oh boy, it's the tech version of "Whack-A-Mole" again! We've got two pesky vulnerabilities, CVE-2023-20198 and CVE-2023-20273, causing a ruckus in Cisco's Internetworking Operating System (IOS) XE Software Web User Interface (UI). Cisco's been on the case, patching up the 17.9 release train with the 17.9.4a update. But don't celebrate yet; we're still waiting on the fixes for the 17.6, 17.3, 16.12 release trains. CISA's advice? If you're on the 17.9 train, update to the 17.9.4a release pronto. And now, in a fun twist, a vulnerability that was initially implicated in the drama, CVE-2021-1435, has been given a clean bill of health by Cisco. It's like a cyber soap opera, only with more acronyms.Already a member? Log in here