Hacking na Cisco sabobin bautar da VIRL-PE kayayyakin more rayuwa

Kamfanin Cisco gano bayanai game da hacking na 7 sabobin da ke goyan bayan tsarin ƙirar hanyar sadarwa VIRL-PE (Virtual Internet Routing Lab Personal Edition), wanda ke ba ku damar ƙira da gwada hanyoyin sadarwar yanar gizo dangane da hanyoyin sadarwar Cisco ba tare da kayan aiki na gaske ba. An gano kutsen ne a ranar 7 ga Mayu. An sami iko akan sabobin ta hanyar amfani da mummunan rauni a cikin tsarin sarrafa tsarin daidaitawar SaltStack, wanda a baya ya kasance. aka yi amfani da don hacking LineageOS, Vates (Xen Orchestra), Algolia, Ghost da DigiCert abubuwan more rayuwa. Hakanan raunin ya bayyana a cikin shigarwa na ɓangare na uku na Cisco CML (Cisco Modeling Labs Corporate Edition) da samfuran Cisco VIRL-PE 1.5 da 1.6, idan mai amfani ya kunna master-gishiri.

Bari mu tunatar da ku cewa a ranar 29 ga Afrilu, an kawar da Gishiri biyu vulnerabilities, ba ku damar aiwatar da lamba ta nesa a kan mai sarrafa mai sarrafa (gishiri-master) kuma duk sabar da aka sarrafa ta hanyarsa ba tare da tantancewa ba.
Don kai hari, samin tashoshin sadarwa na 4505 da 4506 don buƙatun waje ya wadatar.

source: budenet.ru