Thrangrycat Claws Cisco Customer Security

guest · May 13, 2019

Thrangrycat Claws Cisco Customer Security
A linked pair of vulnerabilities could allow an attacker to take over many different types of Cisco networking components
May 13, 2019
https://www.darkreading.com/vulnera...-claws-cisco-customer-security/d/d-id/1334698

A recently discovered flaw in Cisco IOS XE software with the HTTP Server feature enabled could allow a user with stolen credentials to execute code on a Cisco networking device with root privileges — a significant privilege escalation attack.
Dubbed Thrangrycat by the researchers at Red Balloon Security who discovered the linked pair of vulnerabilities, these flaws, designated CVE-2019-1862, would allow an attacker to first bypass the Cisco Trust Anchor module (TAm), then conduct a remote code injection with root execution.

Once the TAm is compromised, the attacker can log into the device and execute code at root privilege. Cisco has released a firmware update that patches the vulnerability, and acknowledges that there are no operational work-arounds to Thrangrycat.

For more, read here and here.
Click to expand...

Log in or Sign up

Thrangrycat Claws Cisco Customer Security

guest Guest

Log in or Sign up

Thrangrycat Claws Cisco Customer Security

guest Guest

Useful Searches