Cisco's 9.8 Flaws Hand Attackers Server Keys and Root Access
Cisco dropped fixes for a pair of max-danger 9.8 CVSS holes — one lets attackers rewrite admin passwords remotely, the other cracks open root shells on SSM. No exploits yet, but history screams 'patch now.'
⚡ Key Takeaways
- Two 9.8 CVSS flaws in Cisco IMC and SSM allow remote unauth access to elevated privileges and root shells.
- Affected: UCS racks, ENCS, Catalyst 8300, SSM On-Prem — patch lists provided, no workarounds.
- IMC's legacy password handling signals deeper architecture drag from 2010s designs into modern edge.
🧠 What's your take on this?
Cast your vote and see what Threat Digest readers think
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by The Hacker News
Related Stories
Security Tools
Iran's April 1 Deadline Puts Apple, Google in Crosshairs
Security Tools
Chrome's Fifth Zero-Day Patch: Google Races Against Relentless Exploits
Security Tools
IRGC Puts Apple, Google, Tesla on Middle East Hit List for April 1 Attacks
Security Tools