home.social

#zerodisco — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #zerodisco, aggregated by home.social.

  1. TechNadu @[email protected] ·

    Threat brief: Operation ZeroDisco — Cisco SNMP zero-day exploited to deploy rootkits
    Summary: CVE-2025-20352 (SNMP stack overflow) is being chained with a modified CVE-2017-3881 Telnet exploit to remotely write memory and deliver a rootkit impacting Cisco 9400/9300/3750G series. Indicators: sudden universal password containing disco, hidden running-config differences, disabled log history, unexpected UDP listeners on closed ports, unexplained VLAN bridging. No reliable automated scanner exists yet - escalate to

    Cisco TAC and initiate low-level firmware/ROM inspection if suspected. Prioritize patching, isolate legacy gear, and monitor SNMP/Telnet telemetry and VLAN changes. Share detections back to the community and follow TechNadu for consolidated IOCs.

    #CVE2025 #ZeroDisco #Cisco #Rootkit #SNMP #VLAN #IoTSecurity #ThreatIntel #PatchManagement #TechNadu

    #cve2025 #zerodisco #cisco #rootkit #snmp #vlan