Cisco Small Business Switches Vulnerable to Remote Attacks Due to Critical Flaws

Cisco has released firmware updates to address nine security flaws in its Small Business Series Switches that could allow an unauthenticated, remote attacker to run arbitrary code or cause a denial-of-service (DoS) condition. Four of the nine vulnerabilities are rated 9.8 out of 10 on the CVSS scoring system, making them critical in nature. Cisco will not release firmware updates for some of the affected products as they have entered the end-of-life process. Users are recommended to apply the patches to mitigate potential threats.