Cisco releases security fixes for critical VPN, router vulnerabilities

Cisco releases security fixes for critical VPN, router vulnerabilities


Cisco has issued a security update that tackles 34 vulnerabilities, five of which are deemed critical. 

It's been an interesting month for enterprise administrators and security staff with Microsoft's Patch Tuesday including fixes for 123 vulnerabilities across 13 products. In particular, warnings were issued over SigRed (CVE-2020-1350), a 17-year-old critical bug that can be used to hijack Microsoft Windows Server builds. 


Adobe, SAP, VMware, and Oracle have also released their own security updates.


Over this week, Cisco added its own contribution, with the networking giant releasing patches for 34 bugs, the most severe of which can be exploited to conduct remote code execution and privilege escalation attacks. 


See also: Cisco: SecureX is the 'centerpiece' of our security portfolio, generally available June 30

The first of the critical bugs, now resolved, is CVE-2020-3330. Issued a CVSS severity score of 9.8, this security flaw impacts the Telnet service in Cisco Small Business RV110W Wireless-N VPN Firewall routers and is caused by the use of a default, static password. If obtained by attackers, this can lead to the full remote hijacking of a device. 


The second security flaw of note is CVE-2020-3323 (CVSS 9.8) which impac ..

Support the originator by clicking the read the rest link below.