Cisco Expressway devices could give attackers root-level command execution if exposed systems remain unpatched. An unauthenticated remote attacker with network access and possession of persistent cookies could connect to the database service and invoke specific commands. The issue affects Expressway Core and Expressway Edge devices. Cisco released fixes and said no workaround addresses the critical weakness.
Why It Matters
Root access would give an attacker control over the underlying operating system of a communications infrastructure device. A related hardening release also addresses multiple internally discovered weaknesses not known to be actively exploited. For leaders: unsupported patch delays leave a high-impact infrastructure path open. For defenders: locate Expressway devices, restrict network access during maintenance, and install the vendor update. The larger lesson is that perimeter communications systems need rapid, direct patch ownership.
What Defenders Should Do
Apply Cisco’s Expressway updates promptly because no workaround provides complete protection.