漏洞描述
Cisco Smart Install endpoints were discovered. Exposure of SMI to untrusted networks could allow complete compromise of the switch.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
blog.talosintelligence.comhttps://blog.talosintelligence.com/2017/02/cisco-coverage-for-smart-install-client.html↗blogs.cisco.comhttps://blogs.cisco.com/security/cisco-psirt-mitigating-and-detecting-potential-abuse-of-cisco-smart-install-feature↗tools.cisco.comhttps://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20170214-smi↗github.comhttps://github.com/Cisco-Talos/smi_check/blob/master/smi_check.py#L52-L53↗github.comhttps://github.com/Sab0tag3d/SIET↗