3 ms·
> While we have been unable to identify the initial attack vector, we have identified two vulnerabilities (CVE-2024-20353 and CVE-2024-20359) So update but pro
by robocat 3y ago
> While we have been unable to identify the initial attack vector, we have identified two vulnerabilities (CVE-2024-20353 and CVE-2024-20359)
So update but probably remain vulnerable - there is no reason to think CISCO has fixed the original vulnerability.
Irrelevant aside: CISCO could have just reported a couple of zero-days they already knew of. Maybe vendors will start stockpiling zero-days ;-P
- 1oooqooq 3y agohow do you close a door you're required to have open? and how do you notify customers if a fisa order prevents you from doing so? i wouldn't want to be a network appliance vendor in the usa or cn at this last decade!
- robocat 3y agoThey should at least say (unless too revealing) how they are going to determine the initial access vector used in this campaign. E.g. say a dedicated team is being financed with $xM. E.g. say that they are setting up honeypot devices to capture the initial vector. E.g. say that code is having a complete external audit and fuzz. I'm not a security expert but if I were a customer I would be pretty dissapointed in the timeline so far and very dissappointed in their respose. It looks like the vulnerabilities fixed only prevent the Line Runner malware reinstalling itself on boot. And nothing is done about Line Dancer.
- 1oooqooq 3y agowhat are you on about? they can't do any of those things, by law