Cisco runs out two critical security warnings for IOS, Apache Struts (again)

Cisco issues two critical security advisories for Cisco IOS and IOS IOS XE Software. The IOS vulnerability is in the Cisco Cluster Management Protocol (CMP) processing code. Cisco says it will release software to address this vulnerability but there are no workarounds at this point. On March 6, 2017, Apache disclosed a vulnerability in the Jakarta Multipart Parser used in Apache Struts2 that could allow an attacker to execute arbitrary code and obtain full control of the device.”]

Source: https://www.csoonline.com/article/3190104/cisco-runs-out-two-critical-security-warnings-for-ios-apache-struts-again.html