129

Static credentials with passwords written into a firewall's code. What could go wrong?

you are viewing a single comment's thread
view the rest of the comments
[-] horse_battery_staple@lemmy.world 14 points 22 hours ago

That could be any user logged into the CLI. Cisco is famously a network appliance company and they make admin available over the network. Anyone who can get to the LAN/VLAN these appliances are on can exploit this. So not specifically physical access.

[-] jmcs@discuss.tchncs.de 12 points 22 hours ago

You are right:

The second is using SSH, which is enabled by default on the management interface of the device. SSH can also be enabled on data interfaces.

Holy fuck.

[-] borari@lemmy.dbzer0.com 2 points 17 hours ago

You are right:

You should have gone with “correct”.

[-] horse_battery_staple@lemmy.world 3 points 17 hours ago* (last edited 7 hours ago)

~~Is that needed or useful criticism?~~

HA! I totally missed the joke. Well played.

[-] Hawke@lemmy.world 5 points 16 hours ago

I think it’s more a reference to your username than actual criticism.

[-] borari@lemmy.dbzer0.com 5 points 16 hours ago

Yeah, I thought that would land better.

[-] horse_battery_staple@lemmy.world 1 points 7 hours ago

Oh GEEZ! Sorry, I had a VERY literal day at work today. Completely flew over my head.

[-] horse_battery_staple@lemmy.world 5 points 22 hours ago* (last edited 22 hours ago)

Yup, that's Cisco alright

[-] ryannathans@aussie.zone 2 points 21 hours ago

Management interface is only available locally

[-] curbstickle@lemmy.dbzer0.com 5 points 20 hours ago

The management interface can 100% be put on LAN and often is.

[-] ryannathans@aussie.zone 1 points 11 hours ago* (last edited 11 hours ago)

Okay sure then you're asking for trouble. You could also configure the word password as your password.

[-] curbstickle@lemmy.dbzer0.com 1 points 11 hours ago

I agree, its not something I would do.

Doesn't change that it happens.

this post was submitted on 28 Oct 2024
129 points (100.0% liked)

Cybersecurity

5588 readers
244 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS