Cisco warned customers today of four critical remote code execution vulnerabilities with public exploit code affecting multiple Small Business Series Switches.
“The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,” Cisco explained.
The Cisco Product Security Incident Response Team also revealed that proof-of-concept exploit code is available for these security flaws, which could lead to active exploitation if motivated threat actors create their own.
The company warned on Wednesday that its Product Security Incident Response Team is “Aware that proof-of-concept exploit code is available” for these security flaws, which could allow threat actors to target vulnerable devices exposed to remote access.
Luckily, Cisco’s PSIRT is yet to find evidence suggesting attempts to exploit the vulnerabilities in attacks.
A joint advisory released by US, UK, and Cisco recently warned that APT28 Russian military hackers have been deploying custom ‘Jaguar Tooth’ malware on Cisco IOS routers to gain unauthenticated access to compromised devices.
