New critical Cisco vulnerability identified that concerns you: For those who don't know, Cisco recently announced that some of its Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) support servers were compromised by exploiting critical SaltStack vulnerabilities that were patched last month.
“Cisco infrastructure maintains the master-salt servers used with Cisco VIRL-PE,” a security advisory published earlier today states. “These servers were upgraded on May 7, 2020.”
“Cisco has determined that Cisco-maintained salt-master servers serving Cisco VIRL-PE versions 1.2 and 1.3 are at risk.”
Six Cisco backend servers were compromised
As detailed by the company, hackers were able to compromise six backend infrastructure servers: us-1.virl.info, us-2.virl.info, us-3.virl.info, us-4.virl.info, vsm-us-1.virl.info, and vsm-us-2.virl.info.
The compromised servers were updated and remediated by Cisco on May 7, 2020, applying patches that address the authentication bypass vulnerability (CVE-2020-11651) and directory traversal vulnerability (CVE-2020-11652) affecting SaltStack servers.
