• About
  • Advertise
  • Privacy & Policy
  • Contact
Saturday, July 26, 2025
  • Login
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
Advertisement
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
No Result
View All Result
Home Business

Assess exposure to multiple vulnerabilities in Cisco products to find solutions, NCC-CSIRT advises users

Ada Okafor by Ada Okafor
November 4, 2022
in Business
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has issued an advisory for users to frequently review alerts for Cisco products to assess their exposure and find a comprehensive update solution.

The advisory, which also recommended using the appropriate software updates that are accessible from the vendor website, followed the identification of multiple vulnerabilities in Cisco Products, especially the Cisco AnyConnect Secure Mobility Client for Windows, which enables employees to access company servers from anywhere without compromising security.

The two vulnerabilities made it possible for a remote attacker exploit to trigger remote code execution and data manipulation on the targeted system.

According to the advisory, “The weaknesses in the product include uncontrolled search path and Dynamic Link Library (DLL) hijacking vulnerabilities. The uncontrolled search path vulnerability results from incorrect handling of directory paths. A directory path is a string of characters used to uniquely identify a location in a folder structure.

“This flaw could be exploited by an attacker by generating a malicious file and copying it to a system directory (folder). An exploit could enable the attacker to copy malicious files with system-level privileges to any location. The attacker needs legitimate Windows system credentials to exploit this vulnerability.

“Moreover, to exploit the DLL hijacking vulnerability, the attacker would also need to have valid credentials on the Windows system. The vulnerability was caused by the device’s inadequate run-time resource validation. By sending the AnyConnect process a specially designed IPC message, an attacker might take advantage of this vulnerability.”

The advisory rated the vulnerability high in impact and probability.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

November 4, 2022

Previous Post

Lafia 2022: Labour Party’s Presidential Campaign flag off brought hope for traumatized Nigerians

Next Post

Firm writes Atiku over alleged non-payment of $5.9m used to process US Visa for him in 2018

Next Post

Firm writes Atiku over alleged non-payment of $5.9m used to process US Visa for him in 2018

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

https://youtu.be/FHyJ1Wr0FAk?si=0WVYI_2OR4OrIrQ4
https://youtu.be/gbE3azm_Io0?si=GdE3Mqelo1ujTNla
Editors resolve to set up fact-check desks in newsroom to fight fake news
Cover

Editors resolve to set up fact-check desks in newsroom to fight fake news

by Mohammed Koi
July 26, 2025
0

*As EU, NGE task media professionals on misinformation, disinformation  Nigerian editors have agreed to set up Fact-Check Desk in their...

Read moreDetails
NAF airstrike hits ISWAP enclave in Tumbuma Baba, Lake Chad axis, neutrialise scores of terrorists

NAF, NASENI sign MoU to expand indigenous research 

July 26, 2025
Bandit kingpin Jummo places N20m levy on Maradun, Matawalle ‘s home town  

Nigeria working with neighbours to tackle insecurity – CDS

July 26, 2025
NUJ chairman deplores proliferation of small arms, light weapons

NUJ chairman deplores proliferation of small arms, light weapons

July 26, 2025
Court orders 54 banks to return N9.3bn stolen from customers accounts

57 legal giants elevated to SANs

July 26, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Homepage

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng