Cisco is advising users to upgrade software on its line of storage routers after the discovery of multiple security vulnerabilities involving the technology.
Three vulnerabilities have been discovered in Cisco SN 5420 Storage Router software releases up to and including 1.1(5).
Two of the vulnerabilities (involving sending a HTTP request with a huge header or sending a fragmented packet over the Gigabit interface) can crash storage routers, and might be used in Denial-of-Service attack, Cisco advises. The third flaw allows an access to the SN 5420 configuration if it has been previously saved on the router.
Crackers are yet to exploit the software flaws, Cisco reports.
|