Re: [c-nsp] TIL: Maintenance Operations Protocol (MOP)

Hi,

On Fri, Aug 06, 2021 at 02:00:30PM +0200, Lukas Tribus wrote:
> I'm no longer putting in hundreds of hours to fight losing battles,
> which earlier in my carrier I did:
> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140828-CVE-2014-3347

Ensuring that MOP is dead and stays buried might actually be worth a
PSIRT effort - any feature that is on-by-default and enables unauthorized
access to a device should be worth the fight.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-----BEGIN PGP SIGNATURE-----
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=p8M3
-----END PGP SIGNATURE-----