Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
Summary
Cisco has released patches for a remote code execution vulnerability in its UCS Central Software, and WatchGuard has addressed authentication and man-in-the-middle flaws in its products. In contrast, SonicWall has indicated it will not be fixing vulnerabilities in its GMS (Global Management System) product.
IFF Assessment
FOE
The decision by SonicWall not to fix vulnerabilities in its GMS product leaves users exposed to potential attacks.
Defender Context
Organizations using Cisco UCS Central or WatchGuard products should prioritize applying the released patches to mitigate identified vulnerabilities. The lack of fixes for SonicWall GMS highlights a potential risk for users of that system, who may need to consider alternative solutions or enhanced compensating controls.