Cisco Critical Flaw Patched in WAN Software Solution

guest · Aug 20, 2020

Default Credentials Expose Cisco ENCS, CSP Appliances to Attacks
August 20, 2020
https://www.securityweek.com/default-credentials-expose-cisco-encs-csp-appliances-attacks

The Cisco Wide Area Application Services (WAAS) solution is designed to optimize traffic over an organization’s network. The Cisco Cloud Services Platform for WAAS (CSP-W) is a hardware platform designed for the deployment of datacenter network function virtualization (NFV), and the Cisco Enterprise Network Compute System (ENCS) is a hybrid platform for branch deployment and for hosting WAAS applications.

Internal security testing conducted by Cisco revealed that the virtual WAAS (vWAAS) with Enterprise NFV Infrastructure Software (NFVIS)-bundled images for ENCS 5400-W series and 5000-W series appliances includes a default, static password.
A remote, unauthenticated attacker could use this default account to log into the NFVIS command line interface (CLI) with administrator privileges.

The vulnerability, tracked as CVE-2020-3446, can be exploited by an attacker who can connect to the targeted device’s NFVIS CLI
Click to expand...

Log in or Sign up

Cisco Critical Flaw Patched in WAN Software Solution

guest Guest

Log in or Sign up

Cisco Critical Flaw Patched in WAN Software Solution

guest Guest

Useful Searches