[?] Related tags:
One crafted request to an unauthenticated API endpoint hands an attacker the box that decides who is allowed on your network -- and then root on it. CVSS 10.0, exploited as a zero-day, in CISA KEV on September 16 with a three-day federal deadline, and no workaround that does not involve an ACL.
A hard-coded low-privilege account shipped inside every Cisco Secure Firewall Management Center lets unauthenticated attackers log in to the firewall management plane -- and it was exploited as a zero-day before Cisco ever published an advisory.
Unauthenticated SSRF in the Cisco Unified Communications Manager WebDialer service lets remote attackers write files to the underlying OS and escalate to root -- public exploit code is already available
Critical pre-authentication flaw in Cisco Integrated Management Controller lets remote attackers reset any admin password and seize full out-of-band control of UCS servers
Critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager actively exploited - Unauthenticated access with netadmin privileges possible
Critical zero-day vulnerability in Cisco Unified Communications Manager and Webex actively exploited - Root access via code injection possible
root@sekurity:~# echo "End of results for tag: Cisco"
End of results for tag: Cisco
root@sekurity:~# _