Cisco Nexus 9000 Switches Allow SSH As Root

Re:Cisco Nexus 9000 Switches Allow SSH As Root by sky_nox on Tuesday May 14, 2019 @06:59PM (#19914658)

If you have the Cisco 9000 Series, patch them now! This SSH backdoor allows an unauthenticated, remote attacker to login as root.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by keanebean86 on Tuesday May 14, 2019 @09:49PM (#19915681)

This is exactly why I only buy belkin routers. I can't even connect to it.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by phs318u on Tuesday May 14, 2019 @09:51PM (#19915690)

Ha! Thanks for making me laugh out loud.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by rakkhi on Wednesday May 15, 2019 @02:15AM (#19916858)

Without wanting to start a political flame war it would be great if there was consistency to how we in the tech community and the media treat these types of vulnerabilities. When Huawei have these sorts of bugs they are reported as backdoors. Bugs happen in software be nice if put the nationalism aside and reported it consistently as bugs or vulnerabilities

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by jauer on Tuesday May 14, 2019 @10:08PM (#19915795)

Nexus 9000, running ACI, not normal NX-OS, as opposed to the ASR 9000 series which are common internet routers.

Cisco model numbers are fun.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by broknbottle on Wednesday May 15, 2019 @12:13PM (#19920855)

god I still have nightmares about cisco sales rep trying to push ACI as the "solution to all problems".

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by walrus01 on Wednesday May 15, 2019 @01:40AM (#19916719)

Also you should have ACLs in place and VLAN segmentation (assuming their use as pure layer 2 devices) so that only certain authorized sections of the network are even able to reach things like the management ssh and SNMP daemons.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by C1sc0cat on Wednesday May 15, 2019 @07:45AM (#19918428)

Or turn that all that shit off and go full Out of Band management - ok there are some trade-offs here.

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by mobilemidget on Wednesday May 15, 2019 @05:07AM (#19917591)

'unauthenticated' should have been in the title of this post

[ Parent | on HN ]

Re:Cisco Nexus 9000 Switches Allow SSH As Root by dagw on Wednesday May 15, 2019 @09:34AM (#19919227)

Given that it is a $30k+ piece of kit I suspect not too many people here have them.

[ Parent | on HN ]