Kompania Cisco information about the hacking of 7 servers that support the network modeling system (Virtual Internet Routing Lab Personal Edition), allowing the design and testing of network topologies based on Cisco's communication solutions without real equipment. The hack was detected on May 7. Control over the servers was gained through exploitation of a critical vulnerability in the SaltStack centralized configuration management system, which had previously to hack the infrastructures of LineageOS, Vates (Xen Orchestra), Algolia, Ghost, and DigiCert. The vulnerability also appeared in third-party installations of Cisco CML (Cisco Modeling Labs Corporate Edition) and Cisco VIRL-PE versions 1.5 and 1.6, if the user enabled salt-master.
Recall that on April 29, two vulnerabilities were fixed in Salt To execute the attack, network ports 4505 and 4506 must be accessible for external requests.
The GNAT Community 2020 has been released
Burimi: opennet.ru
