Security Intelligence Expert On Cisco Routers Embedded Encryption Keys Security Issue

By   ISBuzz Team
Writer , Information Security Buzz | Nov 08, 2019 05:22 am PST

Ssecurity researchers revealed that several Cisco routers aimed at small businesses have the same embedded encryption keys. This can make it much easier for hackers to gain privileged access to the device. You can find more details on the story here.

Notify of
1 Expert Comment
Oldest Most Voted
Inline Feedbacks
View all comments
Kevin Bocek
Kevin Bocek , VP Security Strategy & Threat Intelligence
November 8, 2019 1:26 pm

Security researchers discovered that the same keys and certificates, which act as machine identities and control access to sensitive data, were embedded in several routers. This oversight makes it much easier for attackers to impersonate trusted machines or gain unauthorized, privileged access to these devices.

It\’s unfortunate that many organizations still haven’t realized how important machine identities are to security. For example, it would be unthinkable for an organization to use the same default password on multiple machines but similar missteps with keys and certificates are increasingly common.

The only way to prevent these kinds of mistakes is to put in place a strong machine identity protection program

Last edited 4 years ago by Kevin Bocek

Recent Posts

Would love your thoughts, please comment.x