Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

Cisco has released updates to fix multiple critical security vulnerabilities in Catalyst SD-WAN and IOS XE Software, which were discovered during an internal security review. The vulnerabilities affect Cisco Catalyst SD-WAN Software and Cisco IOS XE Software running in certain modes. The issues are considered critical and include three bugs with a high CVSS score of 9.8. The vulnerabilities exist regardless of device configuration for Cisco Catalyst SD-WAN Software. Cisco IOS XE Software is affected when running in autonomous or controller mode. The updates address a total of 12 security flaws in the affected software.