Backdoors Keep Appearing In Cisco's Routers

[Lucian Armasu]

Five different backdoors were found in Cisco's software this year, and Cisco's history with backdoors goes back many years.

Backdoors Keep Appearing In Cisco's Routers : Read more

 

[kenjitamura]

Really? A company with such massive market share is this egregiously incompetent and shady? All I can say is I hope they go under and no more cisco routers for me.

 

[mlee 2500]

Very disappointing to hear about this. Security is increasingly becoming a primary driver in the selection of enterprise networking gear, and given that so much of what USED to make CISCO special has now become a commodity, they really don't have room for these sorts of mistakes.

 

[rantoc]

Cisco seems to be working hard to obsolete themselves in a world that gets somewhat better at taking security seriously - Beside 99% of the IoT devices...

 

[newsonline.4000000]

Wait until we discover backdoors in intel LAN/Wifi Chips themselves. just wait few years and you will see.

After the CPU and Cisco , next will come intel LAN , intel Gbit LAN , 10Gbit lan and AC Wifi chips.

I dont even think it is safe to make your own router/firewall any more , because the Spy reached the chips themselves , you will need to make your own chips which is impossible.

 

[stdragon]

I love how everyone talks about security within their networks, but have ZERO thought to outsourcing support to India or China. LOL. Oh man...the fail hurts!

 

[wirefire99]

The evil 20 years ago. Manufacturer says to VAR, give me your customer data so we can give up better pricing. So you either comply or can't remain competitive. Then the manufacturer eventually takes the customer data and bypasses the VAR. VAR goes out of business anyway.... Today it is the same thing in a new market. take your applications and put them on the cloud, cloud has all your data. If someone offers the right price and the right "data breach" occurs someone can get all of your company data without you even knowing.

 

[AgentLozen]

Doesn't the term "backdoor" imply that it was intentionally put there by the developer?

How do we know these are backdoors and not just vulnerabilities?

 

[Christopher1]

AgentLozen, did you not read? Hardcoded passwords and hardcoded 'secret' accounts.
Sounds like a backdoor and not a simple vuln to me!

 

[WHAMMO]

username: cisco
password: password

 

[aurvondel]

The Cisco Policy Suite bug is just a default password on a linux VM. You can mitigate it trivially with the 'passwd' command.