Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software

Networking equipment maker Cisco Systems has rolled out patches to address three critical security vulnerabilities in its IOS XE network operating system that remote attackers could potentially abuse to execute arbitrary code with administrative privileges and trigger a denial-of-service DoS...

CVE-2021-34727

CVE-2021-34727 concerns Cisco IOS XE SD-WAN Software. The vulnerability is in the vDaemon process and arises from insufficient bounds checking when processing traffic. An unauthenticated, remote attacker could send crafted traffic to trigger a buffer overflow, potentially executing arbitrary comm...

CVE-2021-34727 Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit...