Cisco Removes Backdoor Account from IOS XE Software

guest · Mar 29, 2018

Cisco Removes Backdoor Account from IOS XE Software
March 29, 2018
https://www.bleepingcomputer.com/news/security/cisco-removes-backdoor-account-from-ios-xe-software/

Cisco removed today a backdoor account from its IOS XE operating system that would have allowed a remote attacker to log into Cisco routers and switches with a high-privileged account.

Cisco devices don't usually come with default accounts, and network admins must set up an account during the device's first boot-up.

Since this account only affects v16.x versions and uses the company's name for the username, this appears to have been accidentally left over from IOS XE's development or testing phase.

The bug can be exploited remotely
This "backdoor" vulnerability (CVE-2018-0150) is considered critical and has a severity score of 9.8 out of 10.
Click to expand...

Log in or Sign up

Cisco Removes Backdoor Account from IOS XE Software

guest Guest

Log in or Sign up

Cisco Removes Backdoor Account from IOS XE Software

guest Guest

Useful Searches