Tumblelog by Soup.io
Newer posts are loading.
You are at the newest post.
Click here to check if anything new just came in.

Cisco Promises Fix For Ap, Router Backdoor

Cisco Linksys E1200 Wireless-N Router

internet law said it will release firmware updates to plug a backdoor found in two of its routers and a wireless access point that could provide attackers administrative control over the devices. Cisco said the previously undocumented feature was found in its WRVS4400N Wireless-N Gigabit security router, its RVS4000 4-port Gigabit security router and its WAP4410N Wireless-N access point. An attacker could exploit this vulnerability by accessing the affected devices from the LAN-side interface and issuing arbitrary commands in the underlying operating system, Cisco said in an advisory it issued on its Web site Friday. An exploit could allow the attacker to access user credentials for the administrative account of the device, and read the device configuration. Related Articles Security expert snubs RSA conference over NSA payment allegations Late last week Reuters reported that security vendor RSA, which encryption solutions, was paid US$10 million by the U.S. arellano @itworldca The company said an attacker can also issue arbitrary commands on the device with escalated privileges. Security researcher Eloi Vanderberken discovered the vulnerability over the Christmas holiday, according to a report from technology publication Networkworld.com. He said he found that connecting to his Linksys WAG200G allowed a remote user to send unauthenticated commands to the device and reset the admin password. Other users later reported finding the same backdoor on Cisco, Netgear and Belkin devices. In some devices, this type of backdoor can be accessed from the Internet. Cisco said there are no known workarounds to the vulnerability. It said it will issue a firmware update this month.
For the original version including any supplementary images or video, visit http://www.itworldcanada.com/post/cisco-promises-fix-for-ap-router-backdoor

Your subscription will automatically renew at the end of the term unless you authorize cancellation. Each year, you'll receive a notice and you authorize that your credit/debit card will be charged BYOD the annual subscription rate(s). You may cancel at any time during your subscription and receive a full refund on all unsent issues. If your credit/debit card or other billing method can not be charged, we will bill you directly instead.
For the original version including any supplementary images or video, visit http://www.pcmag.com/article2/0,2817,2383274,00.asp

Why a one-room West Virginia library runs a $20,000 Cisco router

(None use a VoIP system anyway.) Ironically, the routers can't even be used for VoIP in some key cases. The state police already have a VoIP-based phone system, but the new 3945 series routers did not come with "the appropriate Cisco VoIP modules" to work with the system. The state now has to spend another $84,768 to purchase those modules; without them, the state police can't use the routers, only two of which are actually installed and operating. (For those keeping score at home, this means that 75 $20,000 routers are depreciating in a state police warehouse somewhere in West Virginia.) The report also lays a good deal of blame on Cisco and on the company's engineer for the project. The engineer told the auditor he was simply following the state's instructions, which required him to spec out a proposal using only routers with "internal dual power supplies"hence the 3945s. As the auditor dug into the story, demanding to know when this exact request was made, the Cisco engineer said it originated with the state Department of Education.
For the original version including any supplementary images or video, visit http://arstechnica.com/tech-policy/2013/02/why-a-one-room-west-virginia-library-runs-a-20000-cisco-router/

Cisco launches app-enabled router

The new Linksys EA4500 router looks exactly the same as the Linksys E4200, but it's really a different beast. (Credit: Screenshot by Dong Ngo/CNET) While Netgear and D-Link introduced their approaches to app-supporting and cloud-enabled networking products at CES 2012 , Cisco, which didn't have anything to announce at CES, turns out to be the first to materialize the new concepts. Cisco today unveiled a line of Linksys Smart Wi-Fi routers that promises to change the face, and the body, of home networking. The Linksys EA4500, EA3500, and EA2700 -- the "A" designation being short for "app-enabled" -- look like models in the earlier E Series but have more-powerful hardware and support Cisco Connect Cloud , the next generation of Cisco Connect software. The EA4500, for example, looks exactly the same as the original Linksys E4200 , but the differences inside are significant. The new Linksys EA4500 router looks exactly the same as the Linksys E4200, but it's really a different beast. (Credit: Dong Ngo/CNET) Cisco Connect Cloud is a Web-based portal that is designed to make it possible to quickly and easily manage multiple home networks from anywhere in the world. And in the category of "home network," Cisco now includes home appliances, not just computers and electronic equipment. The company says it has been working with top device manufacturers to simplify the process of getting their network products -- such as TVs and home appliances -- connected, and to get them communicating more with one another to offer new consumer experiences.
For the original version including any supplementary images or video, visit http://news.cnet.com/8301-17938_105-57409483-1/cisco-launches-app-enabled-router/

Don't be the product, buy the product!