top | item 19916832

(no title)

thickice | 6 years ago

can someone help me understand this better.. Did Cisco leave a user public key in the switch and the private key has leaked ? To exploit this vulnerability attacker has to get hold of that private key ?

discuss

order

rando444|6 years ago

The keypair is essentially some default known value.

You shouldn't be able to use this to connect at all, but apparently works over IPv6.

So you'd have to have the private key, as well as knowing the IPv6 address of the device you're connecting to, and that device would have to have a route to the internet or a location you could connect to it from.

thickice|6 years ago

Any idea why it works for v6 but not v4 ? SSH authentication itself is agnostic to the IP version, no ?