4 ms·
From my CCNA days I seem to recall that this protocol is a local one and would require a break into another host on the network. Though the diagram shows the c
by walshemj 7y ago
From my CCNA days I seem to recall that this protocol is a local one and would require a break into another host on the network.
Though the diagram shows the core switch directly connected to the internet instead of having an external router connect to the internet - which was the design CISCO suggested back when in did my CCNMA evening class
- keyme 7y agoThe article does not suggest that devices can be attacked from the internet. The threat is VLAN hopping or lateral movement. That illustration is oversimplified.
- walshemj 7y agoI was being generous :-))))))) though maybe if some PFY had let the management interface exposed to the internet but that is a worse problem I feel.
- bifrost 7y agoI read through it - it doesn't seem like VLAN hopping would really be possible unless you can straight up get into the control plane and change the port configuration. Thats at least 2-3 more steps from "RCE" basically.
- fulafel 7y agoOr a compromised L2 VPN endpoint