Cisco patches up to prevent denial of service attacks
A flaw in the Firewall Services Module could be used for denial of service attacks.
Cisco has released an update that addresses a vulnerability in a series of switches and routers.
The flaw is in the Firewall Services Module (FWSM) for its Catalyst 6500 series switches and 7600 series routers.
An attacker could have caused a denial of service (DoS) attack if they sent "specially crafted ICMP" messages to the Firewall Services Module, Cisco said.
Cisco said it had not yet seen any cases of the flaw being exploited, but had observed data streams that had triggered it by accident.
The US-CERT (United States Computer Emergency Readiness Team) encouraged users and administrators to review the advisory and apply the necessary updates and workarounds.
This new flaw follows a separate patch the networking company released on Wednesday for its IOS XR software, used on some of its routers.
This could have led to routing inconsistencies and denial-of-service.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
The modern workplace: Standardizing collaboration for the enterprise IT leaderHow Barco ClickShare Hub is redefining the meeting room
-
Interim CISA chief uploaded sensitive documents to a public version of ChatGPTNews The incident at CISA raises yet more concerns about the rise of ‘shadow AI’ and data protection risks
-
AI is “forcing a fundamental shift” in data privacy and governanceNews Organizations are working to define and establish the governance structures they need to manage AI responsibly at scale – and budgets are going up
-
Cisco says Chinese hackers are exploiting an unpatched AsyncOS zero-day flaw – here's what we know so farNews The zero-day vulnerability affects Cisco's Secure Email Gateway and Secure Email and Web Manager appliances – here's what we know so far.
-
Researchers claim Salt Typhoon masterminds learned their trade at Cisco Network AcademyNews The Salt Typhoon hacker group has targeted telecoms operators and US National Guard networks in recent years
-
Cisco ASA customers urged to take immediate action as NCSC, CISA issue critical vulnerability warningsNews Cisco customers are urged to upgrade and secure systems immediately
-
Cisco eyes network security gains for agentic AINews New network security updates aim to secure AI agents across enterprises
-
Cisco patches critical flaw affecting Identity Services EngineThe networking giant has urged enterprises to update immediately
-
96% of businesses have low cyber-readiness, claims CiscoThe 2025 Cisco Cybersecurity Readiness Index shows a concerning number of businesses globally are unprepared for rising AI-related threats.
-
Cisco takes aim at AI security at RSAC with ServiceNow partnershipNews The companies claim Cisco AI Defense and ServiceNow SecOps will help address new challenges raised by AI