Cisco has been discovered with an arbitrary code execution flaw on their Cisco IOS XR Software image verification checks, which allows an authenticated, local attacker to execute arbitrary code on their underlying operating system.
Cisco Internetwork Operating System (IOS) is a network operating system that can be used in large-scale enterprise environments for high-performance and reliable routing. It is a privately owned Operating System that runs on the Cisco Systems routers and switches.
This is a Time-of-Check Time-of-use (TOCTOU) race condition due to the install query sent to the ISO image during an ISO install operation. A threat actor can exploit this by modifying an ISO image and carrying out the install requests in parallel, resulting in an arbitrary code execution if the exploitation succeeds.
CISCO SYSTEMS GIVES the CVSS score for this vulnerability as 5.7 (Medium). Cisco has released a security advisory for addressing this vulnerability.
With DoControl, you can keep your SaaS applications and data safe and secure by creating workflows tailored to your needs. It’s an easy and efficient way to identify and manage risks. You can mitigate the risk and exposure of your organization’s SaaS applications in just a few simple steps.
As per the reports shared with Cyber Security News, the affected products are as mentioned below,
However, Cisco has confirmed that this product does not affect IOS Software, IOS XE Software, and NX-OS Software.
| Cisco IOS XR Release | First Fixed Release |
| Earlier than 7.5.2 | Not affected. |
| 7.5.2 and later | Migrate to a fixed release. |
| 7.6 and later | Not affected. |
| 7.7 and later | 7.10.1 |
Users of these products are recommended to upgrade to the latest version to fix this vulnerability and prevent them from getting exploited.
Keep informed about the latest cybersecurity news by following us on Google News, Linkedin, Twitter, and Facebook.
The Sekoia TDR (Threat Detection & Research) team has reported on a sophisticated network infrastructure…
The Socket Threat Research Team has unearthed a trio of malicious packages, two hosted on…
Hackers are now exploiting a legitimate Microsoft utility, mavinject.exe, to inject malicious DLLs into unsuspecting…
Small and midsized businesses (SMBs) continue to be prime targets for cybercriminals, with network edge…
Joining Criminal IP at Booth S-634 | South Expo, Moscone Center | April 28 –…
Cybersecurity researchers have uncovered critical SQL injection vulnerabilities in four TP-Link router models, enabling attackers…
.jpeg?w=1024&resize=1024,682&ssl=1)
