Looking Glasses with Bacon

Summary: At DEF CON 22, Mariano Graziano and Luca Bruno presented offensive research on Looking Glass web applications, which connect to Autonomous System routers over telnet or SSH and pass web form commands to the router console. The research found six vulnerabilities across four open-source Looking Glass packages (MRLG4PHP, Cougar LG, Cistron LG and MRLG), assigned six CVEs by MITRE and affecting 45 ASes worldwide, and Talos released six Snort rules to cover them.
What you should know: Responsible disclosure did not close the gap: some issues went unaddressed by maintainers and some AS sysadmins did not update their Looking Glass instances, leaving backbone router credentials reachable through a simple Google Dork.

Read the original at Cisco Talos ↗

Topics: Malware
Mentions: CVE-2014-3926 CVE-2014-3927 CVE-2014-3928 CVE-2014-3929 CVE-2014-3930 CVE-2014-3931
Related: CVE-2014-3931: Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Jul 07, 2025
ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026
Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026