Dude, Cisco, you had one job.
And they completed it successfully. They literally had a new backdoor every month for years now. No company is that incompetent unless ordered to be so.
Cisco Nexus 9000 Switches Allow SSH As Root
71–80 of 113 posts
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#72Re: Cisco Nexus 9000 Switches Allow SSH As Root
#73This is a nasty one! Sloppy in hindsight. There is one bright side to otherwise disgraceful incidents: All the customers running older versions are now forced to upgrade to the latest versions. The burden of supporting really old versions suddenly vanishes. Box vendors should really stop selling unmanaged boxes/solutions. In reality, customers end up buying service contracts anyway along with boxes. Instead, sell usa…
Most places (especially where they have enough money to be buying Cisco Nexus 9k kit) will want some sort of change management, not the vendor to be making arbitrary changes to their critical infrastructure.
Also, given the number and severity of these sort of vulnerabilities in recent times, do you want to give the same companies remote access to your infrastructure as well? :)
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#74If you have the Cisco 9000 Series, patch them now! This SSH backdoor allows an unauthenticated, remote attacker to login as root.
'unauthenticated' should have been in the title of this post
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#75This is a pretty egregiously editorialized title; what we know is that there's apparently an SSH keypair authorized on these devices, for which the private key is available on the device. That's a terrible, ugly vulnerability, but it's as likely due to stupidity as to malice. The right title is something like: CVS-2019-1804: Cisco Nexus 9000 Switches Allow SSH As Root.
What is a backdoor if not this?
Seems like a not very secure front door to me.
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#76This is a pretty egregiously editorialized title; what we know is that there's apparently an SSH keypair authorized on these devices, for which the private key is available on the device. That's a terrible, ugly vulnerability, but it's as likely due to stupidity as to malice. The right title is something like: CVS-2019-1804: Cisco Nexus 9000 Switches Allow SSH As Root.
How would you know ? shat the fuck up shill.
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#77Re: Cisco Nexus 9000 Switches Allow SSH As Root
#78This is a nasty one! Sloppy in hindsight. There is one bright side to otherwise disgraceful incidents: All the customers running older versions are now forced to upgrade to the latest versions. The burden of supporting really old versions suddenly vanishes. Box vendors should really stop selling unmanaged boxes/solutions. In reality, customers end up buying service contracts anyway along with boxes. Instead, sell usa…
Cisco bought meraki that provides a cloud managed solution, but it's only office equipment.
Re: Cisco Nexus 9000 Switches Allow SSH As Root
#79Earlier quoted context omitted.
The Huawei stuff is pretty bad, but the comments read like they've been copied pasted each time here. It's the exact same talking points.
Because the anti Huawei talk is obviously not in people's interest. Just look how zero politicians worldwide lament that Cisco should be banned from anything related to internet infrastructure despite showing again and again that they are unwilling to stop implementing backdoors. Cisco makes it obvious that backdoors are A OK as long as it's our backdoors. No one acting against Huawei actually cares about peoples sec…
Is it xenophobia masquerading as national security, or national security masquerading as xenophobia?
Neither... it's nothing but hegemony with the pretext of both.