External Pentest Archives - Black Hills Information Security

External Pentest

Blue Team, Red Team BlueTeam, Cisco, External Pentest, internal pentest, Inventory, Nessus, RedTeam, SIET

Cisco Smart Install Escalation and Update!

Jordan Drysdale// tl;dr Both Cisco and Nessus have escalated the Smart Install Client Service feature/vulnerability. Nessus is now reporting the Smart Install RCE as critical. High five!!! Cisco has also packaged up a couple of associated bugs, one of which requires a firmware update. The first is seen below: Reference to this advisory is listed […]

Read the entire post here

Blue Team, External/Internal, Finding, Red Team BlueTeam, Cisco, External Pentest, internal pentest, Inventory, Nessus, RedTeam, SIET

Cisco Smart Installs and Why They’re Not “Informational”

Jordan Drysdale// tl;dr Cisco Smart Install is awesome (on by default)…for hackers… not sysadmins. So, you Nessus too? Criticals and highs are all that matter! Right??? Until this beauty came along, but wait….this isn’t Critical or High. Let’s just ignore it. What can we do with this thing? Download config Upload config Execute commands […]

Read the entire post here