IOS XE 16.1.1 for Catalyst 3850, 3650 could allow attackers to reload devices
Cisco this week issued a security advisory on a vulnerability in its IOS XE software. IOS XE Release 16.1.1 could allow an attacker to cause an affected device to reload.
9 ways Windows 10 just got better
We rank the new features and tweaks to Windows 10 that were included in last week’s update.
The vulnerability is due to incorrect processing of packets that have a source MAC address of 0000:0000:0000, the advisory states. An attacker could exploit it by sending a frame that has a source MAC address of all zeros to an affected device.
Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate it, the company says.
The Cisco Product Security Incident Response Team is not aware of any public announcements or malicious use of the vulnerability, the advisory states.
Earlier this week, Cisco said it was reviewing its products to ensure no backdoor corruptions, or “malicious modifications” exist after Juniper announced that its ScreenOS firewall operating system has been vulnerable for years.