A WA parliamentary question seeks information on the impact of a Cisco device vulnerability on emergency services and corrective services agencies. DFES was not affected but initially had the feature enabled; Justice refers to another QoN; Inspector of Custodial Services was not affected.

AnsweredQoN 3111Legislative Assembly
Asked
12 June 2018
Portfolio
Emergency Services; Corrective Services

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for any departments, agencies, government trading enterprises or boards I ask, noting the statement made by the Australian Cyber Security Centre on 17 April 2018 in relation to the malicious targeting of Cisco devices using the Smart Install feature: (a) Were any devices in the agency affected by this attack: (i) If so, what was the nature of the cyber-attack and what information held by the agency was unlawfully accessed; and (b) Is the Cisco Smart Install feature still in use by the agency as at 1 June 2018: (i) If so, why?

AnswerView source ↗

Answered
16 August 2018
Responded by
Minister for Emergency Services; Corrective Services
Response time
11 days
The Department of Fire and Emergency Services (DFES) advises:
(a) No
(i) N/A
(b) Yes
(i) The Cisco Smart Install feature is enabled by factory default. Security practices when provisioning the relevant Cisco devices ensured that the feature could not be used. The feature was disabled on all devices as at 22 June 2018.
The Office of The Inspector of Custodial Services advises:
(a)-(b) No.
The Department of Justice advises:
Please see response to Legislative Assembly question on notice number 3109.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more