Cisco Switches Vulnerable to Remote Attacks Due to Critical Firmware Flaws

Cisco has warned of four critical remote code execution vulnerabilities affecting multiple Small Business Series Switches, with almost maximum severity ratings. The vulnerabilities allow unauthenticated attackers to execute arbitrary code with root privileges on compromised devices. Proof-of-concept exploit code is available for these security flaws, which could lead to active exploitation if motivated threat actors create their own. Cisco is working on patching the vulnerabilities and has already released firmware updates for some affected switches.