cisco-sa-getvpn-rce-g8qR68sx: Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-getvpn-rce-g8qR68sx?
The severity of cisco-sa-getvpn-rce-g8qR68sx is critical due to the potential for arbitrary code execution by an authenticated remote attacker.
How can I mitigate cisco-sa-getvpn-rce-g8qR68sx?
Mitigation for cisco-sa-getvpn-rce-g8qR68sx involves applying the appropriate software updates provided by Cisco for affected IOS and IOS XE versions.
What conditions must be met for cisco-sa-getvpn-rce-g8qR68sx to be exploited?
To exploit cisco-sa-getvpn-rce-g8qR68sx, the attacker must have administrative control of either a group member or a key server.
What are the impacted products of cisco-sa-getvpn-rce-g8qR68sx?
The impacted products of cisco-sa-getvpn-rce-g8qR68sx include Cisco IOS Software, Cisco IOS XE Software, and Cisco Group Encrypted Transport VPN.
Is cisco-sa-getvpn-rce-g8qR68sx remotely exploitable?
Yes, cisco-sa-getvpn-rce-g8qR68sx can be remotely exploited by an authenticated attacker with the necessary administrative access.