Cisco Warns on Security Hole in Management Tool for Connected Homes

Cisco released a patch for an authentication bypass vulnerability in its Prime Home management platform that could allow attackers to gain administrative access to ISP-managed home devices via a specific web URL. Cisco said versions 6.0+ are not vulnerable, no mitigations other than patching are available, and fewer than 100 devices appear publicly exposed though many more may be protected behind firewalls.