Article #APP2592
SecureLogix recently learned that Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of Cisco IOS XE Software when exposed to the Internet or to untrusted networks. The SecureLogix UTA Appliance requires the web UI feature in Cisco IOS XE software to be enabled in order to interoperate with the Cisco API. The attached document provides an approved mitigation procedure to address this issue until Cisco issues a patch.
See the attachment for details.