Your Cart Is Empty
✖No products in the cart.
Never a company to be caught napping – not even for a router’s quick reboot, Cisco has acted swiftly to plug a serious security hole. The offending flaw is found in their Emergency Responder tool. A rogue chap with too much time and too many smarts could exploit this flaw and gain unauthorized access to susceptible systems like the proverbial fox in the henhouse (if the hens were data, and the fox was a hacker with a penchant for chaos).
The nitty-gritty of this troublesome defect, officially dubbed CVE-2023-20101, lies in its facilitation of remote, unsigned attackers to break into systems using hard-coded credentials. This sounds like a scenario only seen in Hollywood hacker movies, observers may be tempted to ask if Angelina Jolie is about to log in. But with a CVSS score of 9.8, this is no laughing matter – this baby’s got sting and bite.
At the root of this bug is the existence of static user credentials for the root account. These static credentials are usually kept reserved, you know, ‘in case of emergency, break glass’ style. Unfortunately, it’s rather like leaving a spare key under the mat and then printing your address on the mat, not the brightest of ideas.
Hats off to Cisco for quickly responding to this fiasco! No geeky stone has been left unturned in their pursuit of a safer digital environment. As Internet dwellers, let’s remember to keep our wits and our firewalls about us. Be ever vigilant, till the credentialed cows come home or until Nirvana starts selling antivirus software, whichever comes first.
Original Article: https://thehackernews.com/2023/10/cisco-releases-urgent-patch-to-fix.html
No products in the cart.