Cisco warns of IOS XE zero-day actively exploited in attacks

Cisco has discovered a vulnerability in the web UI feature of Cisco IOS XE Software. This vulnerability allows remote attackers to create an account with high privileges on an affected system. They can then use this account to take control of the system.

For steps to close the attack vector for this vulnerability, see the recommendations section of this advisory. Cisco will provide updates on the status of this investigation and when a software patch is available.

• Alert
• Vulnerabilities

AWS Patches Multiple Vulns in WorkSpaces, AppStream 2.0

By infosecbulletin / Friday , January 17 2025

Amazon Web Services (AWS) has recently fixed two major security vulnerabilities in its cloud services: Amazon WorkSpaces, Amazon AppStream 2.0,...

Read More

• International

Malware Trends Review 2024: Ever Recorded Cyber Threats

By infosecbulletin / Friday , January 17 2025

Last year saw a significant rise in cyber threats, with malware becoming more advanced and attack strategies more sophisticated. A...

Read More

• Alert
• Vulnerabilities

Botnet Exploits 13,000 MikroTik Devices Abusing Misconfigured DNS

By infosecbulletin / Thursday , January 16 2025

A recent Infoblox Threat Intel report reveals a sophisticated botnet that exploits DNS misconfigurations to spread malware widely. This botnet,...

Read More

• Alert
• Vulnerabilities

CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows Nodes

By infosecbulletin / Thursday , January 16 2025

A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a...

Read More

• Data Breach
• Vulnerabilities

Hacker leaked 15k config files and VPN passwords of FortiGate firewall device

By infosecbulletin / Thursday , January 16 2025

The hacking group "Belsen Group" has posted over 15,000 unique FortiGate firewall configurations online. The data dump, reportedly obtained by exploiting...

Read More

• Event

Registration open for 1st Agile Cyber Drill 2025

By infosecbulletin / Thursday , January 16 2025

Registration open for "1st Agile Cyber Drill-2025" scheduled for February 26, 2025 online with an awards ceremony for 9 March...

Read More

• Event

30 Days to Go for FutureCrime Summit 2025

By infosecbulletin / Wednesday , January 15 2025

The FutureCrime Summit 2025 is just 30 days away. This conference is the largest on technology-driven crime, covering topics like...

Read More

• Uncategorized

Microsoft January 2025 Patch, 159 Vuls, 10 Critical RCE’s

By infosecbulletin / Wednesday , January 15 2025

Microsoft's January Patch Tuesday update fixed 159 vulnerabilities, including 10 critical Remote Code Execution (RCE) issues. These updates are essential...

Read More

• Uncategorized

CVE-2023-37936
Fortinet released update for a critical cryptographic key vuln

By infosecbulletin / Tuesday , January 14 2025

Fortinet released security patches for a critical vulnerability (CVE-2023-37936) involving a hard-coded cryptographic key. This flaw lets remote, unauthorized attackers...

Read More

• Alert
• Vulnerabilities

Millions of Accounts Vulnerable due to Google’s OAuth Flaw

By infosecbulletin / Tuesday , January 14 2025

A critical flaw in Google’s "Sign in with Google" system has put millions of Americans at risk of data theft....

Read More

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

Affected Products Vulnerable Products

This vulnerability affects Cisco IOS XE Software if the web UI feature is enabled. The web UI feature is enabled through the ip http server or ip http secure-server commands.

To read the full report click here