Critical flaw leaves thousands of Cisco Switches vulnerable to remote hacking | Linux0

Skip ad
114 Views

  • Thanks! Share it with your friends!

    You disliked this video. Thanks for the feedback!

monica
Published
▶️ Critical flaw leaves thousands of Cisco Switches vulnerable to remote hacking

-Application: Cisco IOS, Cisco IOS-XE
-Vendor: Cisco
-Bugs: Stack-based buffer overflow [CWE-20], [CWE-121]
-Risk: Critical; AV:N/AC:L/Au:N/C:C/I:C/A:C (10.0)

1. In their first demonstration, as shown in the video below, researchers targeted Cisco Catalyst 2960 switch to reset/change the password and entered privileged EXEC mode

2. In their second demo, researchers exploited the flaw to successfully intercept the traffic between other devices connected to the vulnerable switch and the Internet.

Security researchers at Embedi have disclosed a critical vulnerability in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to execute arbitrary code, take full control over the vulnerable network equipment and intercept traffic.
The stack-based buffer overflow vulnerability (CVE-2018-0171) resides due to improper validation of packet data in Smart Install Client, a plug-and-play configuration and image-management feature that helps administrators to deploy (client) network switches easily.

The vulnerability was tested on Catalyst 4500 Supervisor Engines, Cisco Catalyst 3850 Series Switches, and Cisco Catalyst 2960 Series Switches devices, as well as all devices that fall into the Smart Install Client type are potentially vulnerable, including:
Catalyst 4500 Supervisor Engines
Catalyst 3850 Series
Catalyst 3750 Series
Catalyst 3650 Series
Catalyst 3560 Series
Catalyst 2960 Series
Catalyst 2975 Series
IE 2000
IE 3000
IE 3010
IE 4000
IE 4010
IE 5000
SM-ES2 SKUs
SM-ES3 SKUs
NME-16ES-1G-P
SM-X-ES3 SKUs
------------------------------------------
Category
Routers and Switches
Be the first to comment