Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software

Networking equipment maker Cisco Systems has rolled out patches to address three critical security vulnerabilities in its IOS XE network operating system that remote attackers could potentially abuse to execute arbitrary code with administrative privileges and trigger a denial-of-service DoS...

CVE-2021-34770

CVE-2021-34770 affects Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers, due to a logic error in CAPWAP packet validation during CAPWAP processing. An unauthenticated, remote attacker could craft CAPWAP packets to execute arbitrary code with administrative privileges or cause a...

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution (cisco-sa-ewlc-capwap-rce-LYgj8Kf)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an...