16 new Cisco advisories

Started by icecream-guy, September 29, 2016, 07:30:04 AM

Previous topic - Next topic
Print
Go Down Pages 1 2 3 4
User actions

icecream-guy

#15
November 03, 2016, 05:59:18 AM
7 more new advisories yesterday.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#16
November 03, 2016, 08:06:54 AM
Quote from: ristau5741 on November 03, 2016, 05:59:18 AM
7 more new advisories yesterday.

Any of them good?
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

icecream-guy

#17
November 04, 2016, 11:11:43 AM
Quote from: deanwebb on November 03, 2016, 08:06:54 AM
Quote from: ristau5741 on November 03, 2016, 05:59:18 AM
7 more new advisories yesterday.

Any of them good?

none of them are good.

the Cisco Prime Home one was pretty funny.

"A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges."
:professorcat:

My Moral Fibers have been cut.

deanwebb

#18
November 04, 2016, 11:23:23 AM
Quote from: ristau5741 on November 04, 2016, 11:11:43 AM
"A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges."


:haha2:
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

NetworkGroover

#19
November 04, 2016, 11:56:17 AM
Quote from: deanwebb on November 04, 2016, 11:23:23 AM
Quote from: ristau5741 on November 04, 2016, 11:11:43 AM
"A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges."


:haha2:

Heh... was just talking about Prime yesterday at a sales meeting.  A Channel guy external to the company suggested we find a way to integrate with Prime since a lot of incumbent Cisco shops use it and it's a typical objection they get... I looked at him in disgust. :P
Engineer by day, DJ by night, family first always

deanwebb

#20
November 04, 2016, 04:10:07 PM
Make a product that does what Prime does, but better, and the world will beat a pathway to your door.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

NetworkGroover

#21
November 07, 2016, 11:34:17 AM
Arista already does for the data center.  That's their focus area.
Engineer by day, DJ by night, family first always

icecream-guy

#22
December 08, 2016, 05:53:42 AM
32 announcements today 3 of which are updated, 29 are neww.  :barf:
:professorcat:

My Moral Fibers have been cut.

deanwebb

#23
December 08, 2016, 07:39:26 AM
Quote from: ristau5741 on December 08, 2016, 05:53:42 AM
32 announcements today 3 of which are updated, 29 are neww.  :barf:

How many score a 10 on the CVSS scale?
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

icecream-guy

#24
December 09, 2016, 07:14:26 AM Last Edit: December 09, 2016, 07:15:57 AM by ristau5741
Quote from: deanwebb on December 08, 2016, 07:39:26 AM
Quote from: ristau5741 on December 08, 2016, 05:53:42 AM
32 announcements today 3 of which are updated, 29 are neww.  :barf:

How many score a 10 on the CVSS scale?

none but that is not the point.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#25
December 09, 2016, 09:38:02 AM
It is the point if you're in management. Not a 10 == we can postpone the patch until our annual patch-a-thon because anything less than a 10 is fine, right?
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

icecream-guy

#26
February 16, 2017, 08:15:26 AM
19 fresh ones,  if you run UCS yer in a world of hurt, also prime ISE, ACS all affected by various issues.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#27
February 16, 2017, 09:35:49 AM
ISE one doesn't look too bad, just a sponsor portal gaffe.

Looks like a big chunk of the advisories deal with XSS issues, I'm guessing it's a block of code common to all those platforms.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

icecream-guy

#28
April 20, 2017, 08:36:34 AM
Another 18 released yesterday, 7 high
:professorcat:

My Moral Fibers have been cut.

deanwebb

#29
April 20, 2017, 08:52:07 AM
Lots involving DNS and our old friend cross-site scripting.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.
Print
Go Up Pages 1 2 3 4
User actions