Cisco fixes router flaws


Cisco has issued a set of patches for its Internet Operating System (IOS) software, used to power its routers and switches.

The networking giant has also published 12 security advisories describing the bugs, noting that many of these vulnerabilities could be exploited by attackers to crash an IOS device.



One of the bugs, an SNMP flaw, could be exploited by an attacker to seize control of the router. However, only specially configured Cisco uBR10012 series devices, used by telecommunications companies to connect broadband customers to the internet are affected by the flaw, Cisco said.

Symantec rates this flaw critical and on Wednesday advised users of these devices who have configured their routers for linecard redundancy apply the patches as soon as possible.

Cisco is not aware of any attacks or previous public disclosures that were based on this flaw.

Other bugs that were patched affect Cisco's multicast, SSL processing, and Session Initiation Protocol software. A complete list of the security bulletins can be found here.

Thanks