Medium · published May 26, 2022
CVSS calls it medium at 6.5. It is confirmed in active exploitation. It sits in the 96.0th percentile for exploit probability.
🚨 A sneaky open port is leaving your Redis instance wide open! An unauthenticated attacker could tap into it like a secret backdoor. ⚠️ Think of it as a restaurant kitchen with a window left slightly ajar. Anyone passing by could peek in, and if they’re crafty, they might toss something dangerous inside before staff even notice! This vulnerability could allow an attacker to connect to the Redis instance on port 6379, potentially writing arbitrary files and extracting sensitive information from the in-memory database. While they can't execute remote code on the host system, they can still wreak havoc within the container. That's a scary thought!
Think of it as a restaurant kitchen with a window left slightly ajar. Anyone passing by could peek in, and if they’re crafty, they might toss something dangerous inside before staff even notice! This vulnerability exists because the Cisco IOS XR Software health check RPM opens TCP port 6379 by default, allowing unauthenticated access to the Redis instance running within the NOSi container.
This vulnerability could allow an attacker to connect to the Redis instance on port 6379, potentially writing arbitrary files and extracting sensitive information from the in-memory database. While they can't execute remote code on the host system, they can still wreak havoc within the container. That's a scary thought! To protect against this, disable the health check RPM if it's not needed or ensure that proper firewalls block access to TCP port 6379. Regularly audit your container settings and configurations to tighten security. You’ve got this! Follow these steps, and you'll keep your systems secure and sound! 🛡️