Cisco, SonicWall and Splunk push out critical vulnerability patches

· Cybersecurity · United States

Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could let attackers run arbitrary code with root privileges on Nexus switches, part of a batch of a dozen critical flaws that could also enable unauthorized access, information leaks, privilege escalation and denial-of-service attacks. Separately, SonicWall issued hotfixes for four flaws in its SMA1000 remote-access appliances, the most serious a CVSS 10.0 pre-authentication server-side request forgery flaw that could let an unauthenticated attacker reach internal functions. Splunk also patched critical vulnerabilities allowing authentication bypass, arbitrary code execution and privilege escalation. The combination forces urgent patching across network, remote-access and log infrastructure.

Why it matters：Network switches, remote-access gateways and log platforms sit at the core of enterprise defense, so unpatched critical flaws there can hand attackers a path straight past perimeter controls, driving pressure to patch quickly.

Key points

  • Cisco's five NX-OS flaws could allow root-level code execution on Nexus switches.
  • SonicWall's most serious SMA1000 flaw scores 10.0 on the CVSS scale.
  • Splunk patched flaws enabling authentication bypass and privilege escalation.

Sources (original reporting)

More stories from this day