Skip to main content

Cisco Warns Hackers Actively Exploited Bug in Carrier-grade Routers



Cisco warned users that the hackers actively exploited a bug in carrier-grade-routers, and it was a zero-day vulnerability affecting the Internetwork Operating System (IOS) that boats with its networking devices. 


The security experts termed the vulnerability as CVE-2020-3566, and it affects the Distance Vector Multicast Routing Protocol (DVMRP) feature of its operating system.




Cisco’s IOS XR Network OS is disposed of various router programs, which include NCS 540 & 560, NCS 5500, 8000, and ASR 9000 series routers. And till now, Cisco hasn’t issued any software update for this vulnerability.




Flaw Details


Advisory ID: cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz


First issued: 2020 August 29


Last updated: 2020 August 31


Version 2.0: Interim


Workarounds: No workarounds 


CVE IDs: CVE-2020-3566, CVE-2020-3569


Cisco Bug IDs: CSCvr86414, CSCvv54838


CWE ID: CWE-400


CVSS Score: Base 8.6


Affected Products


These vulnerabilities attack any Cisco device that is operating any release of Cisco IOS XR Software if an effective interface is configured under multicast routing




The security experts of Cisco said that they had discovered this attack during an investigation. On August 28, 2020, the Cisco Product Security Incident Response Team (PSIRT) became acquainted of ventured exploitation of this vulnerability. 




Apart from this, the company asserted that currently, it’s working on generating software updates for IOS XR, and it will take time to release the update.




What to do to Discover or Determine?


Determine Whether Multicast Routing Is allowed


An administrator can conclude whether multicast routing is allowed on a device by advertising the show igmp interface call. 




RP/0/0/CPU0:router# show igmp interface




Determine whether the device is getting DVMRP Traffic


In this case, an administrator can conclude whether the device is getting DVMRP traffic by publishing the show igmp traffic command. 




RP/0/0/CPU0:router#show igmp traffic


Mitigation


The company has issued some mitigations that are to be followed by the users until the company releases a software update, and here are they:-




Users can perform rate-limiting to reduce IGMP traffic rates. So, users can quickly increase the time that is needed to exploit this vulnerability successfully.


Users can also perform an Access Control Entry (ACE) to the current interface access control list (ACL) or a new ACL to reject inbound DVRMP traffic to interfaces with multicast routing allowed.


The users must disable IGMP routing on interfaces where processing IGMP traffic is not required by opening the IGMP router configuration mode.


The users can perform all the mitigations by assigning the router igmp command.


Moreover, the security experts affirmed that it is still unclear how attackers are exercising this bug in the grand plan of things. They might be utilizing it to impact other methods on the router, like security mechanisms, and obtain access to the device.

Labels:

Comments

Post a Comment

Most Popular Cyber News

Google Task Mate 100% Working Invitation Referral Code – Activate Task Mate Account (Easy Steps)

  Valid and 100% Working Referral Code for Google Task Mate (Beta) Early Access/ Testers : Google India has Launched Task Mate App on 19 November 2020 for the Indian user where you can Earn Money by finding task nearby, complete task i.e. Photo Upload, Record Sentence, Translate Sentences, Check shop details, upload video, etc. As the Task Mate is available to users in Beta Early Access only and for that, you have to enter a valid Invitation Referral Code. Here, Our Website Group (WhatsApp, Telegram and Twitter) Group and Channel are providing valid Referral Codes. Task Mate Beta is currently only available through invitation. Please enter the invitation or referral code below. TaskMate App – Complete Task to Earn Money Article About Valid Invitation Code of Task Mate (Referral Code) Company Google India App Task Mate (Early Access) Version Beta (Early Access) Invitation/ Referral Code Required Validity of Code Only for 100 Users per Invitation Code Website http://www.google.com/ V...
Post a Comment
Read more

Microsoft’s Windows XP operating system (and other versions) source code has been leaked online

  The source code for Microsoft’s Windows XP operating system (and other versions) has been leaked online!  Published as a torrent file on bulletin board website 4chan, the 43GB data dump is said to have been compiled over the course of the last few months by the leaker. The collection also includes source code for Windows 2000 and multiple versions of Windows CE, MS DOS, Windows Embedded and Windows NT - but all of which have a smaller modern install base than XP. The individual responsible for the leak also appears to bear Bill Gates a distinct grudge, dedicating a whole section of the torrent file to videos slandering the Microsoft founder.  The legitimacy of the leaked code has not yet been confirmed, but Microsoft has been made aware of the issue. Although support for Windows XP lapsed in 2014 - meaning the OS has not received security updates for a number of years - a surprising number of users remain loyal to the outdated operating system. As of last month, 1.26% o...
Post a Comment
Read more

GTA 5 release - How to download for free

Epic Games Store confirms GTA 5 release - How to download for free GTA is one of the most popular games in the gaming community and is played by thousands of players around the world. Epic Games' Twitter account accidentally tweeted out the promotional picture, confirming rumors of the game being available for free. GTA 5 will be available for free on the Epic Games store (Image Credits: Take-Two Interactive) An accidental leak by Epic Games' Twitter account inadvertently confirmed that GTA 5 would be available on the Epic Games store till the 21st of May for free. The release date is expected to be the 15th of May 2020. The Epic Games and GTA 5 collaboration comes as no surprise, considering the numerous rumors that had been doing the rounds regarding the same. Gamepressure.com  was one the first to receive a tip from an anonymous source and their website stated, "The free edition of GTA V will release as Premium Edition. In addition to the game itself and access to Grand...
Post a Comment
Read more