Cisco IOS Vulnerabilities, [CVSS 8+] Enable Unauthenticated, Remote DoS Attacks

Cisco issued updates for its IOS and IOS XE operating systems and Access Point software. The update resolves 14 vulnerabilities, including 10 denial-of-service (DoS) issues that can lead to system crashes. Other fixes include privilege escalation, command injection, and access control list bypass. The Access Point Software patches address a secure boot bypass issue (CVE-2024-20265) and a DoS vulnerability (CVE-2024-20271, base score 8.6). CISA encourages user updates as well.