3 ms·
can someone help me understand this better.. Did Cisco leave a user public key in the switch and the private key has leaked ? To exploit this vulnerability att
by thickice 7y ago
can someone help me understand this better.. Did Cisco leave a user public key in the switch and the private key has leaked ? To exploit this vulnerability attacker has to get hold of that private key ?
- rando444 7y agoThe keypair is essentially some default known value. You shouldn't be able to use this to connect at all, but apparently works over IPv6. So you'd have to have the private key, as well as knowing the IPv6 address of the device you're connecting to, and that device would have to have a route to the internet or a location you could connect to it from.
- thickice 7y agoAny idea why it works for v6 but not v4 ? SSH authentication itself is agnostic to the IP version, no ?