Cisco has posted a bumper crop of 12 security advisories covering flaws in its IOS software and related networking kit.

The vulnerabilities create a route for skilled hackers to crash vulnerable systems or obtain sensitive information, among other exploits. Login credentials are not needed to carry out the majority of the attacks.

No one flaw stands out from the batch, but there is a broad theme. Flaws in how Cisco's software processes particular network protocol traffic, such as MPLS or SIP, can cause devices such as VPN appliances to crash.

Altogether the patch batch should equate to "no questions asked" overtime requests from sysadmins and ISP staffers, in particular.

A full summary of the patches can be found on Cisco's website here. The vulnerabilities were addressed in the second round of Cisco's biannual IOS security roundup. The network giant adopted the six-monthly patch cycle back in March as a way of making life easier for sysadmins. ®

Related stories

• Boffin brings 'write once, run anywhere' to Cisco hijacks (5 January 2009)
• Cisco battles Meltdown with mobile and video (13 November 2008)
• Cisco's solid quarter and recession-survival lessons (6 November 2008)
• Reg competition: Cisco goes isup (29 September 2008)
• Cisco breaks cycle with IOS patch (22 May 2008)
• Phlashing attack thrashes embedded systems (21 May 2008)
• Updated Rootkits on routers threat to be demoed (15 May 2008)
• Cisco unleashes IOS patches (27 March 2008)
• Cisco hops onto patching treadmill (6 March 2008)