CISA Warns of Hackers Exploiting Cisco Smart Install Feature

This advisory warns that legacy Cisco Smart Install and weak Cisco password types enable attackers to remotely access and exfiltrate switch configuration files, modify startup configurations, load malicious IOS images, and execute privileged commands, potentially allowing network mapping and lateral movement; CISA/NSA recommend disabling Smart Install and implementing NIST-approved type 8 password hashing and other configuration hardening.