M-M-M-MONSTER KILL: Cisco's bug-wranglers swat 29 in single week Cisco has taken delivery of a bulk order for 29 Common Vulnerabilities and Exposures (CVEs) IDs. If you're running the end-of-life RV110 Wireless-N VPN firewall or RV215W Wireless-N VPN router, bad news: some of their security vulnerabilities won't be patched and there's no workaround – so it is probably time to replace them …
“The Umbrella Roaming Client from Cisco OpenDNS includes a service named Umbrella_RC which is executed as SYSTEM on startup .. The service looks for two Windows binaries in a non-standard path, as seen in Figures 2 and 3, prior to finding them in the Windows System directory allowing us to perform a “Binary Planting” exploitation:” ref
Why didn't Cisco pick up these vulnerabilities in the testing and debugging stage of these security devices, they do actually have a department dedicated to such an important task?
"Why didn't Cisco pick up these vulnerabilities in the testing and debugging stage of these security devices"
Because doing the right thing, is inherently opposed to in the capitalist model, doing what profits is the only way in this economic model.
I'm giving humanity a confident and generous 10 years left on this rock before it burns
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
