Security Intelligence Expert On Cisco Routers Embedded Encryption Keys Security Issue

Ssecurity researchers revealed that several Cisco routers aimed at small businesses have the same embedded encryption keys. This can make it much easier for hackers to gain privileged access to the device. You can find more details on the story here.

Subscribe
Notify of
guest

1 Expert Comment
Most Voted
Newest Oldest
Inline Feedbacks
View all comments
Kevin Bocek
Kevin Bocek , VP Security Strategy & Threat Intelligence
InfoSec Expert
November 8, 2019 1:26 pm

Security researchers discovered that the same keys and certificates, which act as machine identities and control access to sensitive data, were embedded in several routers. This oversight makes it much easier for attackers to impersonate trusted machines or gain unauthorized, privileged access to these devices.

It\’s unfortunate that many organizations still haven’t realized how important machine identities are to security. For example, it would be unthinkable for an organization to use the same default password on multiple machines but similar missteps with keys and certificates are increasingly common.

The only way to prevent these kinds of mistakes is to put in place a strong machine identity protection program

Last edited 2 years ago by Kevin Bocek
Information Security Buzz
1
0
Would love your thoughts, please comment.x
()
x