“Cisco published an advisory for 15 vulnerabilities across its line of Small Business (RV Series) Routers including a critical flaw in its SSL VPN Gateways. With the increase in usage of SSL VPNs over the last three years since the beginning of the pandemic, SSL VPNs are a favoured attack vector for cybercriminals, as they recognise that organisations need to ensure access to internal resources for remote employees. We’ve highlighted the use of SSL VPN flaws by attackers over the last two years in our annual Threat Landscape Retrospective.

“Cisco says they are aware of proof-of-concept exploits for several vulnerabilities reported today. Legacy vulnerabilities tend to have long shelf lives in attacks, especially once proof-of-concept exploits are made public, so it’s important for organisations that use these devices to apply these patches as soon as possible.” Satnam Narang, Staff Research Engineer, Tenable