Home›Questions on Notice›QoN 3117

❓ A WA parliamentary question sought information on the impact of a Cisco Smart Install vulnerability on various government agencies. All agencies reported no impact and no use of the vulnerable feature.

AnsweredQoN 3117Legislative Assembly

Asked

12 June 2018

Member

Mr Z.R.F. Kirkup

Portfolio

Premier; Minister for Public Sector Management; State Development, Jobs and Trade; Federal-State Relations

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for any departments, agencies, government trading enterprises or boards I ask, noting the statement made by the Australian Cyber Security Centre on 17 April 2018 in relation to the malicious targeting of Cisco devices using the Smart Install feature: (a) Were any devices in the agency affected by this attack: (i) If so, what was the nature of the cyber-attack and what information held by the agency was unlawfully accessed; and (b) Is the Cisco Smart Install feature still in use by the agency as at 1 June 2018: (i) If so, why?

AnswerView source ↗

Answered

14 August 2018

Response time

9 days

GoldCorp
(a)        No.
(b)        CISCO smart installer is not utilised by Gold Corporation.
Lotterywest
(a)        There were no Lotterywest devices affected by the malicious targeting of Cisco devices using the Smart Install feature.
(b)        Lotterywest does not use the Cisco Smart Install feature.
Premier and Cabinet
(a)        No.
(b)        No.
Public Sector Commission
(a)-(b) No.
Salaries and Allowances Tribunal
(a)        No.
(b)        No.
Department of Jobs, Tourism, Science and Innovation advises:
(a)          No.
(a)-(i)     Not Applicable.
(b)          No.
(b)-(i)     Not Applicable.

View on Parliament of WA