[Ipg-smz] Need to speak to security expert?

Stephen Satchell ipg at satchell.net
Thu Jul 11 23:27:00 UTC 2019


On 7/11/19 2:31 PM, John Coggeshall via Ipg-smz wrote:
> 
> [DEBUG 2019-07-11 17:20:05] [STM32] Invalid / Unknown Command
> Provided: � �    0-IPSERVICESK9-M), Version 12.2(55)SE3, RELEASE
> SOFTWARE (fc1)
> Technical Support: http://www.cisco.com/techsupport
> Copyright

As a Cisco router/switch jockey, I recognize this sequence.  Your device
did a reload for some reason.  The two question-mark-in-circles is an
RS-232 synchronization problem, whereas the rest afterwards is the
standard banner.  If you are on IPSERVICESK9 in version 12.2(55)SE3,
that suggests the source of this data is an Etherswitch.  Have you
cascaded your equipment through the AUX port, perhaps?

(In all my work, I either have a direct connection to the CONSOLE port,
or I go through a router (2811) and a console serial card to talk to the
devices.)

The "Invalid/Unknown Command" can be a problem with the
startup-configuration on your device.

How did the device restart?  Could be a panic caused by your
configuration, or you have this thing connected to the Internet edge
directly and someone is using a well-know exploit to break in.




More information about the Ipg-smz mailing list