Cisco's 9.8 Flaws Hand Attackers Server Keys and Root Access
Cisco dropped fixes for a pair of max-danger 9.8 CVSS holes — one lets attackers rewrite admin passwords remotely, the other cracks open root shells on SSM. No exploits yet, but history screams 'patch now.'
⚡ Key Takeaways
- Two 9.8 CVSS flaws in Cisco IMC and SSM allow remote unauth access to elevated privileges and root shells. 𝕏
- Affected: UCS racks, ENCS, Catalyst 8300, SSM On-Prem — patch lists provided, no workarounds. 𝕏
- IMC's legacy password handling signals deeper architecture drag from 2010s designs into modern edge. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by The Hacker News
Related Stories
Security Tools
Cisco's Exposed APIs: Root Access via One Bad Request in SSM On-Prem
Security Tools
Cisco IMC's Password Change Flaw Hands Attackers the Keys to Your Servers
Security Tools
Iran's April 1 Deadline Puts Apple, Google in Crosshairs
Security Tools