Cisco discloses flaws and issues critical patches.

Cisco warned that two medium‑severity Secure Email vulnerabilities could let attackers intercept and alter encrypted traffic through man‑in‑the‑middle techniques. The issues affect S/MIME decryption on devices running AsyncOS 16.5.0 or earlier, though no exploitation has been reported. The company also released critical fixes for IOS XR and Nexus 9000 switches, addressing memory corruption, access control weaknesses, and a code‑execution flaw tied to exposed TCP ports. Additional patches resolved a high‑severity SIP bug in several phone models that could trigger denial‑of‑service attacks.

Read more:

https://www.securityweek.com/cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities/