Hackers are exploiting a vulnerability in Cisco's networking software to infiltrate tens of thousands of devices

Researchers have warned of hackers exploiting a security vulnerability in Cisco's "IOS XE" networking software to infiltrate tens of thousands of devices.

Cisco had warned last week of a critical vulnerability in its "IOS XE" application, used for operating a wide range of networking equipment produced by the company, stating that hackers were actively exploiting this flaw.

The vulnerability was found in the web management interface of the "IOS XE" application, which can be used when the affected device is connected to the internet.

According to the tech website TechCrunch, the list of devices operating with "IOS XE" includes enterprise adapters, wireless controllers, network access points, and industrial routers. These devices are used by businesses and small enterprises to securely manage their networks.

In an online statement, Cisco's information security subsidiary, Talos, mentioned that unidentified hackers have been exploiting the security vulnerability known as "zero-day" since at least September 18. Talos added that hackers who successfully exploit the vulnerability gain full control over the victim device, potentially enabling them to engage in unauthorized activities on the victim company's network.

Cisco has not disclosed the extent of the hacking operations carried out through this vulnerability so far.

Meanwhile, the device and internet-related assets search engine, Shodan, reported that approximately 42,000 Cisco devices were affected by hacking operations on October 18, observing a sharp increase in such incidents compared to the previous day.

In their analysis of data related to this vulnerability, Shodan noted that the majority of affected devices were located in the United States, the Philippines, and Mexico, with hackers targeting telecommunications companies providing internet services to both homes and businesses.