So it stands to reason a pretty good portion of the enterprise and small-business market do make use of these particular models. Because this makes access to the device directly available, it also allows the attacker to download and run unsigned software and even drive denial-of-service attacks utilizing any of these Cisco routers.Ĭisco is most likely one of the most popular enterprise network hardware providers in the world, according to Statista, supporting more than 55% of the enterprise network infrastructure. These are particularly nasty in that they effectively allow an attacker to log into the affected device and in turn run whatever they want on it by elevating their privileges on the device. The bugs that were patched allow things such as arbitrary code execution, elevating privileges, arbitrary command execution, and bypass authorization and authentication.

The advisory, which was first published on February 2 and updated again on February 4 of 2022, outlines that a large number of bugs have been patched in the latest firmware available for the devices. The security advisory says to run updates on the devices affected immediately. A successful exploit could allow the attacker to overwrite files on the file system of the affected device,' Cisco warned.A new Security Advisory from Cisco has outlined a huge number of security-related vulnerabilities and issues that have been patched in their latest firmware update. 'An attacker could exploit these vulnerabilities by using the web-based management interface to upload a file to a location on an affected device that they should not have access to. Admins need to ensure devices have firmware that is release 1.0.01.02 or later to be protected. The web interface of the Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers are also vulnerable to remote attacks via a directory traversal issue. There are no workarounds, so customers must upgrade to release 1.0.01.02 or later. Affected devices include the RV160 VPN Router, RV160W Wireless-AC VPN Router, RV260 VPN Router, RV260P VPN Router with POE, and RV260W Wireless-AC VPN Router. The gear is vulnerable if it is running a firmware release earlier than Release 1.0.01.02, according to Cisco.

Cisco small business routers reviews