Cisco Flaws Leave Firewalls, VPNs Vulnerable

Network routing and switching giant Cisco Systems has issued an alert for a potentially serious security flaw affecting multiple firewall products, warning that the bug could cause passwords to be changed without any user interaction.
The San Jose, Calif., company said unauthorized users can take advantage of the firewall bug to try to gain access to a device that has been reloaded after passwords in its startup configuration have been changed.
In addition, authorized users can be locked out and lose the ability to manage the affected device, according to the published advisory.

Click here to read more