Cisco Industrial Ethernet Switches
Monthly
Stored cross-site scripting in the Cisco Industrial Ethernet 1000 Series Switch web-based management interface allows an authenticated remote attacker to inject persistent malicious scripts into interface pages, which then execute in the browser context of other authenticated users. Affected firmware spans versions 1.1 through 1.9.5 across the IE 1000 product line, as confirmed by EUVD-2026-62562 and the Cisco security advisory. No public exploit code or active exploitation has been identified at time of analysis, and Cisco has published advisory cisco-sa-ie1k-NgXUFF52 with remediation guidance.
Management plane flood protection deficiency in Cisco Industrial Ethernet 1000 Series Switches enables unauthenticated remote attackers to exhaust CPU resources, rendering the device manager web GUI, SSH, and API inaccessible. All firmware branches from 1.1 through 1.9.5 are confirmed affected per EUVD-2026-62559. Critically, data-plane forwarding through the switch is explicitly unaffected - only management access is disrupted - though in OT/ICS environments this distinction matters less during incidents requiring remote intervention. No public exploit identified at time of analysis, and this vulnerability is not listed in CISA KEV.
Stored cross-site scripting in the Cisco Industrial Ethernet 1000 Series Switch web-based management interface allows an authenticated remote attacker to inject persistent malicious scripts into interface pages, which then execute in the browser context of other authenticated users. Affected firmware spans versions 1.1 through 1.9.5 across the IE 1000 product line, as confirmed by EUVD-2026-62562 and the Cisco security advisory. No public exploit code or active exploitation has been identified at time of analysis, and Cisco has published advisory cisco-sa-ie1k-NgXUFF52 with remediation guidance.
Management plane flood protection deficiency in Cisco Industrial Ethernet 1000 Series Switches enables unauthenticated remote attackers to exhaust CPU resources, rendering the device manager web GUI, SSH, and API inaccessible. All firmware branches from 1.1 through 1.9.5 are confirmed affected per EUVD-2026-62559. Critically, data-plane forwarding through the switch is explicitly unaffected - only management access is disrupted - though in OT/ICS environments this distinction matters less during incidents requiring remote intervention. No public exploit identified at time of analysis, and this vulnerability is not listed in CISA KEV.