CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature
In an effort to obtain sensitive data, threat actors are misusing the outdated Cisco Smart Install (SMI) capability, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
The organization claimed to have observed adversaries obtain system configuration files via taking advantage of software or protocols that are installed on devices, such as by misusing the outdated Cisco Smart Install function.
Additionally, it stated that it still notices weak password types being used on Cisco network devices, leaving them vulnerable to password-cracking attempts. The terms "password types" and "system configuration file" relate to the algorithms used to protect a Cisco device's password read more about CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature.
...