FBI, Cisco Warn of Russian Attacks on 7-Year-Old Flaw

Russian-linked APT 'Static Tundra' (FSB Center 16) is actively exploiting the high-severity CVE-2018-0171 in unpatched or end-of-life Cisco Smart Install devices to steal configuration files, alter device settings, create persistence (including SYNful Knock), and pivot into critical infrastructure and enterprise networks worldwide; FBI and Cisco Talos issued advisories urging patching or disabling Smart Install and improved inventory/patch management.