A security issue has been reported in various Cisco Firewall products, which may allow malicious people to bypass certain security restrictions.

The problem is caused due to an error resulting in certain passwords (EXEC password, passwords of locally defined usernames, and the enable password in the start-up configuration) being unintentionally changed to a non-random value without user intervention.

The error may happen during a software crash or multiple users configuring a device at the same time.

This may result in users being locked out or lead to unauthorised access to an affected device.

Solution
Update to a fixed version (see the vendor's advisory for details).

Provided and/or discovered by
The vendor credits Terje Bless, Helse Nord IKT.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area