Re: Security risks of obsolete hardware/software

[DrFranken <midrange@xxxxxxxxxxxx>]

Agree with Pete but the issue is that *IF a vulnerability is discovered 
you have no option to correct it with unsupported software or hardware. 
That would put your business at risk.


        - Larry "DrFranken" Bolhuis

www.frankeni.com
www.iDevCloud.com
www.iInTheCloud.com

On 3/18/2013 10:35 AM, Pete Helgren wrote:

> The fact that it is obsolete shouldn't render it vulnerable.  A quick
> search on vulnerabilities on the device show nothing of import
> recently.  If it was current on patches when it became obsolete, then it
> should be OK.  If you hang on to it, then a quick search every couple of
> weeks should keep you covered.  Also, subscribing to a list of known
> vulnerabilities would be a good idea.  The SANS institute has several.
> Searching the metasploit site would also uncover an exploit should one
> surface for the device.
>
> Pete Helgren
> www.petesworkshop.com
> GIAC Secure Software Programmer-Java