Some of Our Sources
- Mashable
- Web Designer Wall
- Joshua Blankenship
- Smashing Apps
- Vandelay Design
- Line 25
- Stylized Web
- Web Resource Source
- Android Headlines
- The Verge
Help Webnuz
Referal links:
June 8, 2018 06:43 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/fLw1ww4MSas/cisco-removes-backdoor-account-fourth-incident-in-the-last-four-months
Cisco Removes Backdoor Account, Fourth Incident in the Last Four Months
For the fourth time this year, Cisco has removed hardcoded credentials that were left inside one of its products, which an attacker could have exploited to gain access to devices and inherently to customer networks. From a report: This time around, the hardcoded password was found in Cisco's Wide Area Application Services (WAAS), which is a software package that runs on Cisco hardware that can optimize WAN traffic management. This backdoor mechanism (CVE-2018-0329) was in the form of a hardcoded, read-only SNMP community string in the configuration file of the SNMP daemon. SNMP stands for Simple Network Management Protocol, an Internet protocol for collecting data about and from remote devices. The community string was there so SNMP servers knowing the string's value could connect to the remote Cisco device and gather statistics and system information about it.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/fLw1ww4MSas/cisco-removes-backdoor-account-fourth-incident-in-the-last-four-months
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot