Command Runner News Today

The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. A cross-site request forgery (CSRF) vulnerability in the Cisco Digital Network Architecture (DNA) Center could open enterprise users to remote attack and takeover. The flaw, tracked as CVE-2021-1257, exists in the web-based management interface of the Cisco DNA Center, which is a centralized network-management and orchestration platform for Cisco DNA. It carries a CVSS vulnerability-severi...

Cisco is stoppering critical holes in its SD-WAN solutions and its smart software manager satellite. Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks (SD-WAN) solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected system with r...

Cisco tags critical security holes in SD-WAN software Tech giant warns of serious weaknesses in DNA Center management software as well Credit: Dreamstime Cisco has noted and fixed two critical and a number of high-degree vulnerabilities in its SD-WAN software portfolio. Most of the vulnerabilities could let an authenticated attacker execute command injection attacks against an affected device, which could let the attacker utilise root privileges on the device. The first critical ...