Back to today’s briefing

Story perspectives

Rising Exploitation Attempts Target Critical Cisco Vulnerabilities

3/21/2025

24 6

Summary

Story summary

Exploitation attempts are on the rise against two critical Cisco vulnerabilities, CVE-2024-20439 and CVE-2024-20440, as reported by Johannes Ullrich from the SANS Internet Storm Center. The first vulnerability involves a static credential flaw, while the second reveals excessive log information. A small botnet appears to be behind these attacks, targeting Cisco products when the Smart Licensing Utility is active.

1 of 1

Story summary

Exploitation attempts are on the rise against two critical Cisco vulnerabilities, CVE-2024-20439 and CVE-2024-20440, as reported by Johannes Ullrich from the SANS Internet Storm Center. The first vulnerability involves a static credential flaw, while the second reveals excessive log information. A small botnet appears to be behind these attacks, targeting Cisco products when the Smart Licensing Utility is active.