A simple command allows the CIA to commandeer 318 models of Cisco switches

Credit: arstechnica.com



Cisco Systems said that more than 300 models of switches it sells contain a critical vulnerability that allows the CIA to use a simple command to remotely execute malicious code that takes full control of the devices. There currently is no fix.


Cisco researchers said they discovered the vulnerability as they analyzed a cache of documents that are believed to have been stolen from the CIA and published by WikiLeaks two weeks ago. The flaw, found in at least 318 switches, allows remote attackers to execute code that runs with elevated privileges, Cisco warned in an advisory published Friday. The bug resides in the Cisco Cluster Management Protocol (CMP), which uses the telnet protocol to deliver signals and commands on internal networks. It stems from a failure to restrict telnet options to local communications and the incorrect processing of malformed CMP-only telnet options.


"An attacker could exploit this vulnerability by sending malformed CMP-specific telnet options while establishing a telnet session with an affected Cisco device configured to accept telnet connections," the advisory stated. "An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device."





Top Stories

Northern lights, cameras, action: Night sky watchers capture dramatic aurora over Seattle

The beautiful sunshine in Seattle on Saturday gave way to an equally awesome display in the night sky as the northern lights made a rare appearance over the city and parts of Washington state. Photographer Tim Durkan, who captured a similar display last May, was at it again in the wee hours of Sunday morning. “Just home from an amazing ‘Saturday Night Special’ Aurora Borealis over the Emerald City – WOW…!” Durkan wrote on Facebook. “I got to the party a little late last night (around 2am) but heard it was bright all over the state!! Did you catch a… Read More
  • 2 days ago
  • 11

A 16th-century engineer whose work almost defeated an Empire

When the Ottomans laid siege to Rhodes, this smart inventor held them off for months.
  • 2 days ago
  • 9

Inside Sonos’ Seattle office, where the music is bumpin’ and the team is growin’

Sonos, the high-tech connected speaker maker that opened a Seattle office about two years ago, is turning up the volume on its local presence. Sonos established its Seattle presence at the Bullitt Center, a six-story, 50,000-square-foot structure on Capitol Hill that bills itself as the “greenest commercial building in the world,” in 2015 and started with just 10 people. Today, the company is up to 70 people in the office, with another 35 or so open positions locally, and it has outgrown its initial space. Sonos recently picked up another half floor, giving it two full floors in the building, totaling about 13,000 square… Read More
  • 2 days ago
  • 9

These are the online communities we will never forget

Ars staffers fondly recall great internet groups they've joined.
  • 18 hours ago
  • 9

Casual gamers who want an affordable desktop now have an option from Dell

Dell’s Inspiron gaming laptop now has a desktop counterpart.
  • 4 hours ago
  • 8

Latest in Technology

Casual gamers who want an affordable desktop now have an option from Dell

Dell’s Inspiron gaming laptop now has a desktop counterpart.
  • 4 hours ago

Intel unveils X-series platform: up to 18 cores and 36 threads, from $242 to $2,000

The new X299 platform replaces X99, and scales both lower and higher.
  • 5 hours ago

Intel claims 30% performance boost for 8th generation processors

Next generation chips will also pack 4 cores and 8 threads into a 15W power envelope.
  • 5 hours ago

30 years later, the legacy of ‘Star Trek: The Next Generation’ lives on

Silicon Valley Comic Con held a panel to celebrate the 30th anniversary of Star Trek: The Next Generation (TNG) this spring in San Jose’s historic City National Civic theater. At this panel the near-capacity crowd, siphoned from the Con’s 65,000 attendees, could confess their adoration, ask questions and spend time with the actors who portrayed their beloved TNG characters. It was very clear that after 30 years, TNG remains an inspiration to many, personally and professionally. RELATED: Star Trek’s Tricorder, realized? This device uses AI to diagnose medical conditions Star Trek: TNG, which debuted on Sept. 28, 1987, ran for seven… Read More
  • 14 hours ago

Star Trek’s Tricorder, realized? This device uses AI to diagnose medical conditions

According to Star Trek, 23rd century doctors will diagnose most illnesses and determine the general state of health via a device called a Tricorder. But as with many of Star Trek’s futuristic technologies, aficionados of the show don’t want to wait for their great-great grandchildren to experience its wonders. Channeling Willy Wonka’s Veruca Salt, they chant, “I want it now.” RELATED: 30 years later, the legacy of ‘Star Trek: The Next Generation’ lives on The XPRIZE offers one path toward pushing science fiction technology into the now—and the Qualcomm-sponsored Tricorder XPRIZE recently awarded $2.6 million to Final Frontier Medical Devices for their… Read More
  • 14 hours ago

BMW’s ReachNow investigating cases of cars getting stuck on Washington State Ferries

Be careful the next time you take a BMW ReachNow vehicle on a ferry. GeekWire has learned of multiple recent incidents with BMW ReachNow vehicles — part of the automaker’s car-sharing program in Seattle — getting stuck on Washington State Ferries, including two from this holiday weekend. One knowledgeable source said a ReachNow customer was forced to spend four hours on the Whidbey Island ferry this weekend because his vehicle’s wheels were locked, making the vehicle immovable unless dragged. The state ferry system won’t let passengers abandon a car on the ferry because of security concerns. Here’s a response from ReachNow to GeekWire today: We believe that… Read More
  • 18 hours ago

The battleship, the drone, and the chocolate chip cookies

Ars' Sean Gallagher remembers his singular contribution to drone warfare's development.
  • 18 hours ago

These are the online communities we will never forget

Ars staffers fondly recall great internet groups they've joined.
  • 18 hours ago

Tech innovation meets military service: GeekWire’s Memorial Day remembrance and update

As the first warm-weather holiday weekend of the year, it’s easy to get caught up in barbecues and road trips and lose touch with Memorial Day’s roots. But today is also about reflecting on those who have passed while serving in the armed forces. In their honor, we’ve rounded up some of our veteran and military-related coverage. We’ve also checked in on what the people and organizations have been up to since we featured them in GeekWire. Continue reading to find out what they’re up to now and to learn about the intersection of technology and military service. On the front lines of… Read More
  • 20 hours ago

Microsoft HoloLens takes augmented reality to next level for warfighters

Microsoft’s HoloLens augmented-reality system is scoring victories with the U.S. military, which means the goggle-eyed headsets are more likely to pop up at a wargame near you. Last November, the HoloLens system was incorporated into a platform known as the Augmented Immersive Team Trainer, which lets Marines plan missions and conduct “what-if” simulations while looking at a real or virtual terrain. The experiment, conducted during training exercises at Camp Lejeune, N.C., worked so well that the Marines are now distributing HoloLens kits to 24 infantry battalions around the country. “This suite of new training tools is easy to implement and… Read More
  • 22 hours ago

Inside Sonos’ Seattle office, where the music is bumpin’ and the team is growin’

Sonos, the high-tech connected speaker maker that opened a Seattle office about two years ago, is turning up the volume on its local presence. Sonos established its Seattle presence at the Bullitt Center, a six-story, 50,000-square-foot structure on Capitol Hill that bills itself as the “greenest commercial building in the world,” in 2015 and started with just 10 people. Today, the company is up to 70 people in the office, with another 35 or so open positions locally, and it has outgrown its initial space. Sonos recently picked up another half floor, giving it two full floors in the building, totaling about 13,000 square… Read More
  • 2 days ago

Northern lights, cameras, action: Night sky watchers capture dramatic aurora over Seattle

The beautiful sunshine in Seattle on Saturday gave way to an equally awesome display in the night sky as the northern lights made a rare appearance over the city and parts of Washington state. Photographer Tim Durkan, who captured a similar display last May, was at it again in the wee hours of Sunday morning. “Just home from an amazing ‘Saturday Night Special’ Aurora Borealis over the Emerald City – WOW…!” Durkan wrote on Facebook. “I got to the party a little late last night (around 2am) but heard it was bright all over the state!! Did you catch a… Read More
  • 2 days ago