Four of the vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, and they apply regardless of the device configuration. The remaining issues impact Secure Workload Software, with the fixes now available through standard Cisco update channels.

• Affected products: Crosswork Data Gateway, Crosswork Network Controller, Crosswork Planning, and Secure Workload Software.
• Severity: Five of the nine flaws carry a CVSS score of 10.0; four are rated lower but still warrant immediate patching.
• The vulnerabilities are present irrespective of configuration, meaning any deployment of the affected products is at risk.

Cisco has not disclosed specific technical details for each flaw, but the updates should be prioritized given the maximum severity ratings. Administrators are advised to review their current software versions and apply the patches without delay to mitigate potential exploitation.

Source: The Hacker News

Are you running any of the affected Crosswork or Secure Workload components, and how are you prioritizing these critical patches alongside your other vulnerability management tasks?