{"id":28165,"date":"2019-08-01T16:48:15","date_gmt":"2019-08-01T16:48:15","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/30356\/Cisco-To-Pay-8.6-Million-To-Settle-Whistle-Blower-Case.html"},"modified":"2019-08-01T16:48:15","modified_gmt":"2019-08-01T16:48:15","slug":"cisco-to-pay-8-6-million-to-settle-whistle-blower-case","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-to-pay-8-6-million-to-settle-whistle-blower-case\/","title":{"rendered":"Cisco To Pay $8.6 Million To Settle Whistle Blower Case"},"content":{"rendered":"

\"Rolling<\/span><\/span><\/p>\n

The case involved a flaw in Cisco’s video surveillance software.<\/span><\/p>\n

Christoph Soeder\/picture alliance via Getty Images<\/span><\/p>\n

Cisco<\/a> Systems has agreed to pay $8.6 million to settle a case<\/a> brought forward by a former contractor who accused the company of selling video surveillance software with a known vulnerability<\/a> to the US government. While much of the payment will act as a refund for 16 states and the federal government, approximately $1.6 million will go to the whistleblower who brought the issue to the government’s attention. <\/p>\n

In the lawsuit, which was filed in 2011 and unsealed on Wednesday, a Danish subcontractor said he found a flaw in Cisco’s Video Surveillance Manager<\/a>, a software package used for controlling surveillance cameras and storing recorded video feeds, according to CNET sister site ZDNet. The flaw reportedly could have allowed a hacker to gain access to data stored in VSM systems, turn off cameras and gain access to a clients’ networks. <\/p>\n

The subcontractor reportedly said he notified Cisco of the issue in October 2008, but the company allegedly failed to fix the bug and continued to sell the software, including to government agencies. <\/p>\n

“We are pleased to have resolved a 2011 dispute involving the architecture of a video security technology product we added to our portfolio through the Broadware acquisition in 2007,” said a Cisco spokesperson in an emailed statement Thursday. “There was no allegation or evidence that any unauthorized access to customers’ video occurred as a result of the architecture.”<\/p>\n

Cisco said that it advised customers to upgrade to a new version of the software, which fixed the security issues, in 2013. All sales of the older version of the software ended by September 2014, the company said.<\/p>\n

\n
\n
<\/div>\n

Now playing:<\/span> Watch this:<\/span><\/span> Capital One’s data breach and how criminals could use…<\/p>\n

1:50<\/span><\/p>\n<\/div>\n<\/div>\n

\n
\"arlo-audio-doorbell-promo\"<\/a><\/p>\n
11 smart doorbells to watch over your front stoop<\/p>\n

12 Photos<\/p>\n<\/div>\n<\/div>\n<\/div>\n