Cisco BroadWorks and Openwave flaws actively exploited despite patches

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Organizations running Cisco BroadWorks or Openwave Messaging Webtop Media Transcoder

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild

What to do

Apply the available patches for Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder.

The Brief

CISA added two security flaws affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities catalog.
CISA cited evidence of active exploitation of both flaws.
The headline indicates that patches are available despite the active exploitation.

Why it matters

Flaws that are actively exploited and already patched leave unpatched systems at immediate risk of compromise, so operators should apply fixes without delay.

The checklist behind the tier

Checklist · 2 of 10 yes

Yes	Hits tech teams	Cisco BroadWorks is enterprise telephony software that IT teams run and operate.
No	Core infrastructure	A single vendor's telephony platform, not software nearly every team runs.
No	Popular tool	BroadWorks and Openwave Messaging Webtop are niche enterprise products, not mainstream developer tools.
Yes	Exploited in the wild	The Hacker News: CISA added both flaws to its KEV catalog, citing evidence of active exploitation.
No	Public exploit	The Hacker News: no source says exploit code or a proof-of-concept is published.
No	Remote, no login	The Hacker News: the sources do not state whether network access without credentials is enough.
No	Full takeover	The Hacker News: the sources do not state code execution or admin takeover.
No	Secrets exposed	The Hacker News: no source reports stolen credentials, tokens, configs or customer data.
No	Supply chain	The Hacker News: the flaws are in products, not described as malicious code in a trusted channel.
No	No fix yet	The Hacker News headline: flaws exploited despite available patches, so a fix exists.

Source

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches ↗ The Hacker News · 2h ago

First seen 2h ago · 1 source · Full story page · How tiers are decided