Re:Cisco Nexus 9000 Switches Allow SSH As Root
by legooolas on Wednesday May 15, 2019 @04:39AM
(#19917454)
Most places (especially where they have enough money to be buying Cisco Nexus 9k kit) will want some sort of change management, not the vendor to be making arbitrary changes to their critical infrastructure.
Also, given the number and severity of these sort of vulnerabilities in recent times, do you want to give the same companies remote access to your infrastructure as well? :)
Re:Cisco Nexus 9000 Switches Allow SSH As Root
by pjc50 on Wednesday May 15, 2019 @06:50AM
(#19918122)
> Box vendors should really stop selling unmanaged boxes/solutions
Users should no longer be allowed to own their own hardware? That'll be popular with both the hacker crowd and the high-security people.
What of devices that are never intended to be connected to the wider internet?
Re:Cisco Nexus 9000 Switches Allow SSH As Root
by Hikikomori on Wednesday May 15, 2019 @05:26AM
(#19917693)
Cisco bought meraki that provides a cloud managed solution, but it's only office equipment.
There is one bright side to otherwise disgraceful incidents: All the customers running older versions are now forced to upgrade to the latest versions. The burden of supporting really old versions suddenly vanishes.
Box vendors should really stop selling unmanaged boxes/solutions. In reality, customers end up buying service contracts anyway along with boxes. Instead, sell usage/service/connectivity and manage the hardware. A critical patch like this one could then be applied before a PSIRT is released. Frequent upgrades(security patches or feature/bug fix patches) are now commonplace. The user experience would be so much better if the solution were managed by the vendor (cloud managed).