Payroll details of 100000 Morrisons staff including bank account numbers leaked by insider and published on the internet, the company has confirmed. Morrisons, which is Britain’s fourth biggest supermarket group, said it had called in police and cyber crime experts. A spokesman for West Yorkshire Police said: “We are aware of the situation and are supporting Morrisons in their investigation into these matters.”
A vulnerability in the web management interface of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV215W Wireless-N VPN Router, and the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain administrative-level access to the web management interface of the affected device.
The vulnerability is due to improper handling of authentication requests by the web framework. An attacker could exploit this vulnerability by intercepting, modifying and resubmitting an authentication request. Successful exploitation of this vulnerability could give an attacker administrative-level access to the web-based administration interface on the affected device.
Cisco has released free software updates that address this vulnerability.
The following products are affected by the vulnerability that is described in this advisory:
- Cisco RV110W Wireless-N VPN Firewall running firmware versions 220.127.116.11 and prior
- Cisco RV215W Wireless-N VPN Router running firmware versions 18.104.22.168 and prior
- Cisco CVR100W Wireless-N VPN Router running firmware versions 22.214.171.124 and prior