Stories
Slash Boxes
Comments

SoylentNews is people

Cisco Reports Bug Disclosed in WikiLeaks' Vault 7 CIA Dump

posted by on Wednesday March 22 2017, @06:47AM   Printer-friendly
from the CIA-has-the-best-0-days dept.

Arthur T Knackerbracket has found the following story:

It looks like Cisco won't be chasing up a partnership with WikiLeaks: it's combing the "Vault7" documents itself, and has turned up an IOS / IOS XE bug in more than 300 of its switch models.

The vulnerability is in the Cisco Cluster Management Protocol (CMP) in IOS and IOS XE. The protocol passes around information about switch clusters using either Telnet or SSH.

The bug is in the default configuration of affected devices, even if the user doesn't have switch clusters configured, and can be exploited over either IPv4 or IPv6.

It's a two-fold bug: first, the protocol doesn't restrict CMP-specific Telnet to local communications, instead processing commands over "any Telnet connection to an affected device"; and second, malformed CMP-specific Telnet options are incorrectly processed.

[...] Cisco's advisory doesn't tell us if it's aware of exploits using the flaw. If they are discovered, this is very substantial news because The Reg expects there are tens of thousands, if not hundreds of thousands, of these devices installed around the world. And all look to have been at the CIA's mercy for an unknown period of time.

-- submitted from IRC

Original Submission

 
This discussion has been archived. No new comments can be posted.
Cisco Reports Bug Disclosed in WikiLeaks' Vault 7 CIA Dump | Log In/Create an Account | Top | 7 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: -1, Troll) by Anonymous Coward on Wednesday March 22 2017, @07:05AM (3 children)

    by Anonymous Coward on Wednesday March 22 2017, @07:05AM (#482580)

    I hope LINODE uses CISCO switches! And FUCK SOYLENT!!

    Starting Score:    0  points
    Moderation   -1  
       Troll=1, Total=1
    Extra 'Troll' Modifier   0  
    Total Score:   -1  

  • (Score: -1, Offtopic) by Anonymous Coward on Wednesday March 22 2017, @08:16AM

    by Anonymous Coward on Wednesday March 22 2017, @08:16AM (#482594)

    My Knob is leaking.

  • (Score: 0) by Anonymous Coward on Wednesday March 22 2017, @08:54AM (1 child)

    by Anonymous Coward on Wednesday March 22 2017, @08:54AM (#482610)

    Why is this comment still showing up even tho it's modded down to -1? My filter should hide posts at this moderation level - something broken? Or settings ignored in the new scheme?

    • (Score: 0) by Anonymous Coward on Wednesday March 22 2017, @01:31PM

      by Anonymous Coward on Wednesday March 22 2017, @01:31PM (#482693)

      Switch to TNG and make yourself a nice cup of tea, earl grey, hot.