Cisco Systems is warning of three vulnerabilities within its Internet Operating System (IOS) software that could allow a denial-of-service (DoS) attack or let a hacker run arbitrary code on an affected switch router.
The company has published workarounds and issued an updated version of the software.
The three problems are:
CERT wrote that all three vulnerabilities could cause a device to reload its OS. In that case, a secondary, sustained DoS condition could be caused since packets won’t go through the device.
“Because devices running IOS may transmit traffic for a number of other networks, the secondary impacts of a denial of service may be severe,” CERT said.
-Jeremy Kirk, IDG News Service (London Bureau)
Check out our CIO News Alerts and Tech Informer pages for more updated news coverage.