DEV Community

Cover image for Cisco Patches Critical Root RCE in Nexus Switches and Hardens IOS XR Software
BeyondMachines for BeyondMachines

Posted on Originally published at beyondmachines.net

Cisco Patches Critical Root RCE in Nexus Switches and Hardens IOS XR Software

Summary

Cisco patched ten vulnerabilities, including a critical root-level remote code execution flaw in Nexus 9000 switches and multiple memory safety issues in IOS XR software.

Take Action:

If you run Cisco Nexus 9000 switches or IOS XR routers, make sure the management and control interfaces are not reachable from the internet and only accessible from trusted networks. Check your Nexus models with "show module" and block TCP ports 43210 and 43211 with access control lists until you can patch. Apply Cisco's Software Maintenance Updates (SMUs) for IOS XR and the fixed Nexus software as soon as possible.


Read the full article on BeyondMachines


This article was originally published on BeyondMachines

Top comments (0)