Skip to content
  • 0 Votes
    1 Posts
    3 Views
    offseq@infosec.exchangeO
    Cisco issues patches for 48 CRITICAL vulnerabilities in ASA, Secure FMC & Secure FTD. No exploits observed yet, but urgent action is needed — patch immediately to protect critical infrastructure. https://radar.offseq.com/threat/cisco-patches-critical-vulnerabilities-in-enterpri-60dcf18f #OffSeq #Cisco #Infosec #PatchManagement
  • 0 Votes
    1 Posts
    2 Views
    technadu@infosec.exchangeT
    Zyxel addresses critical CVE-2025-13942 RCE affecting UPnP in 4G/5G CPEs, DSL/Ethernet, Fiber ONTs, and wireless extenders. Exploitation requires WAN + UPnP enabled; Shadowserver tracks ~120k exposed devices.Additional post-auth command-injection flaws (CVE-2025-13943, CVE-2026-1459) patched. EOL devices (VMG1312, VMG3312/13, SBG3300/3500) remain unpatched; replacement recommended.Mitigation recommendations:• Apply firmware updates immediately• Disable unnecessary UPnP/WAN access• Monitor network exposure of legacy devices• Track patched vs. unpatched CPEs/routers in enterprise inventoriesSource: https://www.bleepingcomputer.com/news/security/zyxel-warns-of-critical-rce-flaw-affecting-over-a-dozen-routers/How are you prioritizing critical RCE patches for network devices? Comment below and follow for in-depth threat reporting.#NetworkSecurity #IoTSecurity #PatchManagement #RCE #RouterSecurity #CVE #ThreatIntel #Infosec #ZeroTrust #EnterpriseSecurity