Cisco Patches 13 High-Severity Router and Switch Bugs

Cisco Systems released patches for 29 bugs Wednesday that addressed flaws in a wide range of its products including routers and switches running the IOS XE networking software. Thirteen of the vulnerabilities revealed are rated high severity. The bulk of the high-severity vulnerabilities are tied...

CVE-2019-12648 Cisco IOx for IOS Software Guest Operating System Unauthorized Access Vulnerability

A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Guest Operating System Guest OS running on an affected device. The vulnerability is due to incorrect role-based access control RBAC evaluation...

CVE-2019-12648

The CVE-2019-12648 entry is corroborated by multiple connected sources. Cisco reports an RBAC evaluation flaw in the IOx Guest OS environment of Cisco IOS/IOS XE; a low-privileged user can authenticate to the Guest OS and gain unauthorized root access to the Guest OS. This affects devices that ru...