{"id":57620,"date":"2024-11-07T11:48:53","date_gmt":"2024-11-07T11:48:53","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-scores-a-perfect-cvss-10-with-critical-flaw-in-its-wireless-system\/"},"modified":"2024-11-07T11:48:53","modified_gmt":"2024-11-07T11:48:53","slug":"cisco-scores-a-perfect-cvss-10-with-critical-flaw-in-its-wireless-system","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-scores-a-perfect-cvss-10-with-critical-flaw-in-its-wireless-system\/","title":{"rendered":"Cisco scores a perfect CVSS 10 with critical flaw in its wireless system"},"content":{"rendered":"

Cisco is issuing a critical alert notice about a flaw that makes its so-called Ultra-Reliable Wireless Backhaul systems easy to subvert.<\/p>\n

The weakness \u2013 dubbed CVE-2024-20418<\/a> and made public yesterday \u2013 is with the Unified Industrial Wireless Software that the devices use. Crucially, the flaw is serious enough that a remote attacker with no privileges could upgrade themselves to admin-level access and install whatever nasties they like.<\/p>\n

“An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system,” Cisco warned<\/a>. “A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system of the affected device.”<\/p>\n

The following kit is affected and needs immediate patching if URWB is enabled \u2013 there are no workarounds:<\/p>\n