Cisco Systems has warned customers about critical vulnerabilities in the Sophos antivirus engine included in its IronPort email and Web security appliances. The vulnerabilities in Sophos Anti-Virus that affect Cisco IronPort appliances were publicly disclosed by Google security engineer Tavis Ormandy on Monday. Cisco rated the severity of the vulnerabilities at 9.7 out of 10 on the CVSS (Common Vulnerability Scoring System) scale. The flaws can be attacked from the network, have a low complexity access level and can completely compromise the confidentiality and integrity of the affected products.”]

