@ChrisPret wrote:
if it is possible to rootkit that model and leave a backdoor.
Security companies have been discovering hard-coded admin &/or root usernames in Cisco codes for years. So yes, there are "backdoor".
But the question is this: If the security bulletin has been published, what are YOU doing about it? Did you update the firmware, as recommended? Are you using a strong set of passwords, as recommended?
Questions you are are asking have been answered in the last 4 to 6 years (or more). It is all up to individual users if they want to get off the couch and do something or not.
Next thing to consider: The network is not always the egress for an attack. Petya and Wannacry(pt) came through an email attachment. Mirai botnet comes from IP cameras, DVRs with bad codes. Magecart are due to poor coding practices. STUXnet came from an infected USB stick.
