Difference between revisions of "Switches"

From Hack Sphere Labs Wiki
Jump to: navigation, search
(Small Gigabit w/ VLAN Capabilities and Web Interface)
Line 8: Line 8:
 
*HP 8-Port L3 Managed Switch (JG348AS#ABA) - HP 1910-8G Switch <ref>http://www8.hp.com/us/en/products/networking-switches/product-detail.html?oid=5257664#!tab=specs</ref>
 
*HP 8-Port L3 Managed Switch (JG348AS#ABA) - HP 1910-8G Switch <ref>http://www8.hp.com/us/en/products/networking-switches/product-detail.html?oid=5257664#!tab=specs</ref>
 
*TRENDnet TEG-082WS <ref>http://www.trendnet.com/products/proddetail.asp?prod=195_TEG-082WS#tabs-solution02</ref>
 
*TRENDnet TEG-082WS <ref>http://www.trendnet.com/products/proddetail.asp?prod=195_TEG-082WS#tabs-solution02</ref>
TPLINK No web interface
+
*TP-LINK TL-SG3210 10-port Pure-Gigabit L2 Managed Switch, 8 10/100/1000Mbps Ports, 2 Gigabit SFP Slots, 20Gbps Bandwidth, Web/CLI Management
 +
 
 +
==TL-SG2008==
 +
The TL-SG2008 ships with a big stack of security flaws, including the use of SSLv2 years after most sensible vendors have stopped shipping it. The biggest problem, however, is the version of VxWorks shipped in the switch--it's vulnerable to more than ten publicly known flaws, at least one of which goes back five years.
 +
 
 +
After some initial problems getting TP-Link support to understand the problem, I finally talked to someone who confirmed that the switch is vulnerable--all of their "2-series" switches are.
 +
 
 +
They have no plans to issue fixed firmware.
 +
 
 +
Sadly, I didn't discover the problems until I was outside my return window. I've removed it from my network, however.

Revision as of 10:04, 17 June 2015

Small Gigabit w/ VLAN Capabilities and Web Interface

  • D-Link 5-Port EasySmart Gigabit Ethernet Switch (DGS-1100-05)
  • D-Link 8-Port EasySmart Gigabit Ethernet Switch (DGS-1100-08)
  • Cisco SG200-08 8-port Gigabit Smart Switch (SLM2008T-NA)
  • Cisco SG300-10 10-port Gigabit Managed Switch (SRW2008-K9-NA)
  • Netgear ProSAFE GS108Tv2 8-Port Gigabit Smart Switch 10/100/1000Mbps
  • Dell PowerConnect 2808 [1]
  • HP 8-Port L3 Managed Switch (JG348AS#ABA) - HP 1910-8G Switch [2]
  • TRENDnet TEG-082WS [3]
  • TP-LINK TL-SG3210 10-port Pure-Gigabit L2 Managed Switch, 8 10/100/1000Mbps Ports, 2 Gigabit SFP Slots, 20Gbps Bandwidth, Web/CLI Management

TL-SG2008

The TL-SG2008 ships with a big stack of security flaws, including the use of SSLv2 years after most sensible vendors have stopped shipping it. The biggest problem, however, is the version of VxWorks shipped in the switch--it's vulnerable to more than ten publicly known flaws, at least one of which goes back five years.

After some initial problems getting TP-Link support to understand the problem, I finally talked to someone who confirmed that the switch is vulnerable--all of their "2-series" switches are.

They have no plans to issue fixed firmware.

Sadly, I didn't discover the problems until I was outside my return window. I've removed it from my network, however.
  1. http://www.dell.com/us/business/p/powerconnect-2800/fs
  2. http://www8.hp.com/us/en/products/networking-switches/product-detail.html?oid=5257664#!tab=specs
  3. http://www.trendnet.com/products/proddetail.asp?prod=195_TEG-082WS#tabs-solution02