{"id":66293,"date":"2022-11-04T20:14:18","date_gmt":"2022-11-04T19:14:18","guid":{"rendered":"https:\/\/nationalwire.com.ng\/?p=66293"},"modified":"2022-11-04T20:14:18","modified_gmt":"2022-11-04T19:14:18","slug":"assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users","status":"publish","type":"post","link":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/","title":{"rendered":"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users"},"content":{"rendered":"

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequently review alerts for Cisco products to assess their exposure and find a comprehensive update solution.<\/p>\n

The advisory, which also recommended using the appropriate software updates that are accessible from the vendor website, followed the identification of multiple vulnerabilities in Cisco Products, especially the Cisco AnyConnect Secure Mobility Client for Windows, which enables employees to access company servers from anywhere without compromising security.<\/p>\n

The two vulnerabilities made it possible for a remote attacker exploit to trigger remote code execution and data manipulation on the targeted system.<\/p>\n

According to the advisory, \u201cThe weaknesses in the product include uncontrolled search path and Dynamic Link Library (DLL) hijacking vulnerabilities. The uncontrolled search path vulnerability results from incorrect handling of directory paths. A directory path is a string of characters used to uniquely identify a location in a folder structure.<\/p>\n

\u201cThis flaw could be exploited by an attacker by generating a malicious file and copying it to a system directory (folder). An exploit could enable the attacker to copy malicious files with system-level privileges to any location. The attacker needs legitimate Windows system credentials to exploit this vulnerability.<\/p>\n

\u201cMoreover, to exploit the DLL hijacking vulnerability, the attacker would also need to have valid credentials on the Windows system. The vulnerability was caused by the device’s inadequate run-time resource validation. By sending the AnyConnect process a specially designed IPC message, an attacker might take advantage of this vulnerability.\u201d<\/p>

\r\n
Advertisement<\/div>\r\n\t\t\t\t\t\t\t<\/a>\r\n \r\n\t\t\t\t\t\t\t<\/div>\n

The advisory rated the vulnerability high in impact and probability.<\/p>\n

The CSIRT is the telecom sector\u2019s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.<\/p>\n

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequently review alerts for Cisco products to assess their exposure and find a comprehensive update solution<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[23,17],"tags":[648],"coauthors":[2391],"class_list":["post-66293","post","type-post","status-publish","format-standard","","category-business","category-news","tag-ncc"],"yoast_head":"\nAssess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire<\/title>\n<meta name=\"description\" content=\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire\" \/>\n<meta property=\"og:description\" content=\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/\" \/>\n<meta property=\"og:site_name\" content=\"National Wire\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-04T19:14:18+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Friday Ekeoba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/\",\"name\":\"National Wire\",\"description\":\"About Nigerians, Nigerian Business and Other Stories\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#webpage\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/\",\"name\":\"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire\",\"isPartOf\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\"},\"datePublished\":\"2022-11-04T19:14:18+00:00\",\"dateModified\":\"2022-11-04T19:14:18+00:00\",\"author\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\"},\"description\":\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent\",\"breadcrumb\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nationalwire.com.ng\/sub\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\",\"name\":\"Friday Ekeoba\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire","description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/","og_locale":"en_US","og_type":"article","og_title":"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire","og_description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent","og_url":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/","og_site_name":"National Wire","article_published_time":"2022-11-04T19:14:18+00:00","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Friday Ekeoba","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/nationalwire.com.ng\/sub\/#website","url":"https:\/\/nationalwire.com.ng\/sub\/","name":"National Wire","description":"About Nigerians, Nigerian Business and Other Stories","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#webpage","url":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/","name":"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users - National Wire","isPartOf":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#website"},"datePublished":"2022-11-04T19:14:18+00:00","dateModified":"2022-11-04T19:14:18+00:00","author":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927"},"description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequent","breadcrumb":{"@id":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nationalwire.com.ng\/sub\/assess-exposure-to-multiple-vulnerabilities-in-cisco-products-to-find-solutions-ncc-csirt-advises-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nationalwire.com.ng\/sub\/"},{"@type":"ListItem","position":2,"name":"Assess Exposure To Multiple Vulnerabilities In Cisco Products To Find Solutions, NCC-CSIRT Advises Users"}]},{"@type":"Person","@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927","name":"Friday Ekeoba","url":"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/"}]}},"_links":{"self":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/comments?post=66293"}],"version-history":[{"count":1,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66293\/revisions"}],"predecessor-version":[{"id":66294,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66293\/revisions\/66294"}],"wp:attachment":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/media?parent=66293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/categories?post=66293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/tags?post=66293"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/coauthors?post=66293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}