Scans devices and check for Cisco Smart Install client protocol.
The scan tool depends on python 2.7.
$ sudo apt-get install python2.7
The tool works fine within a virtualenv as well.
the tool sends a crafted probe to your device and determines if you are running Cisco Smart Install.
Cisco Talos Blog post: http://blog.talosintelligence.com/2017/02/cisco-coverage-for-smart-install-client.html
Cisco PSIRT Blog post: https://blogs.cisco.com/security/cisco-psirt-mitigating-and-detecting-potential-abuse-of-cisco-smart-install-feature
Cisco Security Response: Cisco Smart Install Protocol Misuse : https://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20170214-smi
Cisco Product Security Incident Response Team (PSIRT)
The Cisco Product Security Incident Response Team is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information related to Cisco products and networks. Cisco PSIRT provides security advisories, security responses, and security notices. The PSIRT team is available around the clock to identify possible security issues in Cisco products and networks.
For immediate emergency assistance, contact the 24 hour a day PSIRT dedicated hotline at 877 228-7302 or 408 525-6532. For emergency assistance on this issue via e-mail, contact [email protected] and reference Cisco Smart Install Misuse.
To receive non-emergency assistance or report suspected security-related issues with Cisco products, contact [email protected].
For additional information about Cisco PSIRT's process, please refer to Cisco's Security Vulnerability Policy at: http://www.cisco.com/c/en/us/about/security-center/security-vulnerability-policy.html