Pharmacy chain's Cisco edge firewall used 'password' as enable password; audit and IT clashed over severity because of bonuses
A pen tester, Dahvid Schloss (COO of Suzu Labs), audited the network devices of a large, unnamed US pharmacy retailer and found that an internet-facing Cisco edge firewall used the enable (administrator) password "password". The password was stored as Cisco IOS type 7, a reversible encoding with a publicly known key, so he could recover i…