Cisco patches critical Nexus flaws: Are your switches vulnerable?
Summary
The insufficient input validation may occur when FXOS and NX-OS process Cisco Fabric Services packets received during distribution and synchronization.Cisco posted a blog this week explaining why it often fixes bugs in IOS and NX-OS releases before disclosing them in an advisory.Its a practice that appears to cause confusion for customers wondering why it hasnt told them fixed code has been available for several months before it discloses them."There have been some questions as to why creating fixes and releasing updates can take several weeks, or sometimes even months, before an advisory is published," Ciscos Customer Assurance Security Programs team wrote.Cisco patches a severe flaw in switch deployment software that can be attacked with crafted messages sent to a port thats open by default.
Classifications
AskAI Classifications
LabelsLinked Companies
