IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
A penetration testing specialist conducting a security audit of a large American pharmacy retailer found a critical vulnerability on a Cisco edge firewall—the device facing the internet. The firewall's enable password, which grants administrator access and controls all network traffic, was set to the word 'password.' This weak credential could allow attackers with network access to escalate privileges and potentially shut down network operations.
Key points
- Major pharmacy chain's edge firewall had admin password literally set to 'password'
- Enable command grants full administrative control over firewall and network traffic
- Vulnerability discovered during routine security audit by penetration tester
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
