Did you hear the one about Cisco routers using `strcpy` insecurely for login authentication? Makes you go AAAAA-AAAAAAArrg segfault

Friday March 1, 2019. 07:02 PM , from TheRegister

RV110W, RV130W, RV215W need patching to close remote hijacking bug
Cisco has patched three of its RV-series routers after Pen Test Partners (PTP) found them using hoary old C function strcpy insecurely in login authentication function. The programming blunder can be exploited to potentially hijack the devices.…

Read more at TheRegister

go.theregister.com/feed/www.theregister.co.uk/2019/03/01/cisco_cve_2019_1663_strcpy_login_authentica...

Current Date

Nov, Fri 1 - 08:34 CET

Did you hear the one about Cisco routers using strcpy insecurely for login authentication? Makes you go AAAAA-AAAAAAArrg *segfault*

Did you hear the one about Cisco routers using `strcpy` insecurely for login authentication? Makes you go AAAAA-AAAAAAArrg segfault