Cisco warns it won’t fix critical flaw in small business routers despite known exploit code
One is that disabling remote management and blocking access to ports 443 and 60443 is a workaround that prevents exploitation of the flaws.
The other is that the devices have reached end of life. Cisco ended support for the RV082 and RV016 in 2021, and software maintenance ended for the RV042 and RV042G in the same year – but the hardware will be supported until 2025. Now for the tricky part: Cisco is"aware that proof-of-concept exploit code is available for the vulnerabilities that are described in this advisory" but"is not aware of any malicious use of the vulnerabilities that are described in this advisory."
But given that criminals routinely hunt for easy-to-attack platforms, it surely won't be long before someone attempts to exploit these vulnerabilities.that small businesses are not renowned for their infosec capabilities or diligence. So while the fix is relatively trivial for a technical user, many actual owners of these machines will have no idea how to block access to ports 443 and 60443. That is, if they even receive news of the flaws.
Throw in the fact that small routers often just work for years at a time without intervention, and it is almost certain some of these devices are ripe for attack – and will be for the foreseeable future. ®
Brasil Últimas Notícias, Brasil Manchetes
Similar News:Você também pode ler notícias semelhantes a esta que coletamos de outras fontes de notícias.
Green Line Trolley Operator Found Not Guilty in 2021 CrashThe MBTA trolley operator who was at the controls during a major crash in 2021 was acquitted of gross negligence charge on Wednesday. Owen Turner was accused of causing the Green Line trolley crashon Commonwealth Avenue back in July 2021. , is being charged with negligence. The crash, which happened during the busy 6 p.m. hour, left 27 people hurt,…
Consulte Mais informação »
Elon Musk's drop in fortunes breaks world recordThe Tesla and Twitter boss has seen his fortune fall by $165bn (£135bn) since November 2021.
Consulte Mais informação »
Love Island's Priya Gopaldas slams lack of diversity and 'token representation'Former Love Island star Priya Gopaldas has slammed the show’s lack of diversity and 'token' South Asian representation. 'No, dropping someone in a week before the final is tokenism, it doesn’t count.'
Consulte Mais informação »
New software sells new hardware – but not foreverComplex software packages need ever gruntier specs... and Koomey’s Law awaits
Consulte Mais informação »
The best video editing software in January 2023Whether you're editing video for social media or a potential blockbuster, you'll need the perfect software. This guide explains which one would be best for you.
Consulte Mais informação »