Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Software Update for Cisco IE 3000 Series Switches

Published: 2010-07-10
Last Updated: 2010-07-10 16:46:52 UTC
by Tony Carothers (Version: 1)
0 comment(s)

Cisco recently released an update to their Industrial Ethernet 3000 (IE 3000) Series switches in which two software versions have a hard-coded SNMP address vulnerability.  A workaround and software update is available.  I would like to point out a detail in this advisory that seems pertinent given the industrial application of these devices.  On the notification page is another advisory: "Prior to deploying software, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment" 

 
--Tony Carothers
0 comment(s)
Diary Archives