5 ms·
You won’t have a solution for the monthly CVEs for Cisco’s firmware though.
by tinus_hn 4y ago
You won’t have a solution for the monthly CVEs for Cisco’s firmware though.
- RobotToaster 4y agoIs cisco firmware piracy not a thing? I get the feeling it's about to become one if it wasn't.
- red-iron-pine 4y agoYou can easily find firmwares for older EOL systems. Cisco isn't even gonna fight that. Readily available on the Bay of Yarrrrrrr Newer firmwares for Cisco, Juniper, Brocade, et al, are a little harder but still easy to find. In both cases caveat emptor, since you have no way of knowing if they're trustworthy or not. I messed around with some older yarrrrrr firmware when I was studying for my CCNP and built a lap from craigslist hardware, but that was behind a pfsense firewall I built myself and kept totally away from anything that mattered. No malicious behavior AFAIK, but I'd never trust those IOS/IOS-NX images in Prod.
- wjholden 4y agoWell, Cisco publishes both MD5 and SHA-512 hashes for all their updates. It would be pretty impressive for a bad guy to build an evil file that has both an MD5 and also SHA-512 collision. You might need an active CCO account to view http://software.cisco.com http://software.cisco.com, though.
- deleted 4y ago[deleted]
- deleted 4y ago[deleted]
- wjholden 4y agoYou're right, but you might be disappointed in how seldom network operators actually install updates. It isn't uncommon to find switches with a year of uptime still running the factory software that came preinstalled. (I'm obviously not trying to defend this malpractice!)