⬇ Download holy card: ·
Saint Demon's Cries, Who Changed the Switches' Passwords
Patron of managed network switches, the NSDP protocol, and packets without authentication.
Life
On 6 September 2021 Gynvael Coldwind revealed Demon's Cries, a flaw in certain NETGEAR smart switches. The sccd daemon, which listens for the NSDP management protocol, accepted a packet missing its authentication field as if it were legitimate: so an attacker with no credentials could change the administrator password remotely. It was one of the ornithologically named vulnerabilities of that research.
Prayer
O Saint Demon's Cries, who shouts commands nobody authenticated, let our daemons refuse packets without a signature. Amen.
How to celebrate
Celebrated by updating the NETGEAR switch firmware and isolating the management interface.
An unsigned packet, a masterless daemon.