Static credentials with passwords written into a firewall’s code. What could go wrong?

  • jaybone@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    Yeah that’s my point. Even if the manufacturer actually limits the IP config on the mgmt interface to be configured as not routable over the internet, it could intentionally be on a subnet accessible by some kind of ssh jump server or bastion host. (Or in your example, maybe unintentionally via the Wordpress server.)