--- Begin Message ---
    On Fri, Aug 06, 2021 at 02:00:30PM +0200, Lukas Tribus wrote:
    > I'm no longer putting in hundreds of hours to fight losing battles,
    > which earlier in my carrier I did:
    > 
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140828-CVE-2014-3347

    Ensuring that MOP is dead and stays buried might actually be worth a
    PSIRT effort - any feature that is on-by-default and enables unauthorized
    access to a device should be worth the fight.

+1, and worth a PSIRT case right away. 
But it doesn't provide unauthorized access, does it? Drew's test showed a 
password prompt (not sure what the AAA config looked like).. 

        oli


--- End Message ---
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to