Fortinet, Palo, Checkpoint, Cisco, Sonicwall ... is there any big firewall vendor that didn't have any critical vulnerabilities last year?
Firewall vendors in 2024
Fortinet, Palo, Checkpoint, Cisco, Sonicwall ... is there any big firewall vendor that didn't have any critical vulnerabilities last year?
17 Comments
M33@lemmy.sdf.org · 32 pts · 1y
Obsolete binaries not updated for years, hardcoded secrets… this is what you get in firewalls like any other piece of black box equipment.
lennivelkant@discuss.tchncs.de · 21 pts · 1y
Security by obscurity may work in delaying exploits, but once someone breaks the obscurity, they have a headstart on exploiting it over those hoping to fix it.
cron@feddit.org · 17 pts · 1y
Security by old software, or how I call it: the ivanti approach
lennivelkant@discuss.tchncs.de · 13 pts · 1y
That makes me nervous, but I'm not allowed to tell you why
MajorHavoc@programming.dev · 7 pts · 1y
Yep. Closed source is for the software that no one would ever buy if they could read it.
cron@feddit.org · 7 pts · 1y
And every service runs as root. This enables the CRL webserver to download /etc/shadow ...
M33@lemmy.sdf.org · 5 pts · 1y
Or user sessions persist on the filesystem so a glitch on the captive portal’s web server allow you to get clear text username and password for currently connected vpn sessions …
kolorafa@lemmy.world · 15 pts · 1y
Mikrotik & pfSense?
cron@feddit.org · 5 pts · 1y
sounds correct
osaerisxero@kbin.melroy.org · 4 pts · 1y
pfsense technically shared the ssh server one i thought
deltapi@lemmy.world · 1 pts · 1y
The last time I installed pfsense Ssh was disabled by default.
osaerisxero@kbin.melroy.org · 3 pts · 1y
It is, but it's also the first thing I turn on when I install a new one.
CodeHead@lemmy.world · 3 pts · 1y
firewalla?
pearsaltchocolatebar@discuss.online · 2 pts · 1y
Makes me glad I went with MikroTik for my home network.
slazer2au@lemmy.world · 5 pts · 1y
No. And if there are any that say they didn't I don't believe them.
fruitycoder@sh.itjust.works · 2 pts · 1y
Did nftables or ebpf have any critical zero days last year?
cron@feddit.org · 5 pts · 1y
AFAIK not. This meme is targeted at commercial firewall appliances, that often have VPN/IPS/authentication and many other features that are exploited regularly.