Cisco Secure Workload API Remote Code Execution | MSSP Advisory

Cisco patched a critical severity 10.0 CVSS flaw in Secure Workload APIs that allows remote code execution without authentication. The vulnerability affects the API endpoints used for workload segmentation and policy management. Attackers can execute arbitrary commands on affected systems by sending specially crafted API requests.

Your clients running Cisco Secure Workload for microsegmentation are exposed to complete system compromise through unauthenticated remote code execution. If you manage or monitor these environments and miss this patch, you face client data breaches and contract violations when attackers pivot through compromised segmentation infrastructure.

📬