Cisco patched this security flaw (CVE-2024-20439) in September, describing it as "an undocumented static user credential for an administrative account" that lets unauthenticated attackers log into ...

Thirty-five Cisco tools across the following product areas ... meaning that attackers who control log messages or log message parameters can execute arbitrary code. Fixed were made Friday for ...