0Wning The Datacenter Using The Cisco 7000-Series Switch - Nx-Os Insecurity

No ratings

Presented at t2 2010 by

George Hedfors

t2.fi

Banks and large corporations are constantly upgrading their infrastructure. One of the latest additions to the Cisco family is the 7000-series with it's new and "secure" NX-OS. This switch can easily take the role as the sole core switch in some of the largest network infrastructures in the world. It manages up to 512 x 10 gigabit interfaces and is a new virtualization platform within networking. It's new Linux based operating system enables old attack vectors, such as network based denial of service attacks to become remotely exploited buffer overflows. Deployment of generic rootkits is also possible by breaking out of the Cisco CLI environment using a series of undocumented features. What would be impact for a large bank or corporation be if the core switch was infected by backdoors that took control over all VLANs?