Security Info

As Cyber attacks seem to move more into the focus of the WEF, I wanted to let you know that you can lock down NeDi some more by simply deleting devwrite.pl from nedi’s inc/ folder. It might be a good idea to do that anyway, if you don’t intend to use Devces-Write from the GUI.

If you don’t provide any write credentials to NeDi it will not be able to perform any changes on network devices.

Just in case you’re still using NeDi+ 2.0 and didn’t get to apply the latest patch to it. You can copy Nodes-Traffic.php and Monitoring-History.php from the NeDi-2.0 Community release over to your installation in order to mitigate 2 vulnerabilities mentioned in the previous news article.

Similar Posts

Spring Incoming

Spring Incoming

Security researcher Veno Eivazian found some vulnerabilities in Nodes-Traffic and Monitoring-History (only exploitable by authenticated users). I thank him for contacting me thus helping to improve NeDi! He mentioned System-Files as well, but as this module can perform actual software updates and is only accessible by admins, any “mitigation” would defeat its purpose. Please update…

End of Another Year

End of Another Year

2020 has been difficult for many and revealing to me in addition. Thus I’ve decided to give up the Facebook page and plan to redo the video tutorials in order to focus on NeDi’s development with less distractions. Also I’m happy to release NeDi 2.0’s Patch3 to my customers today. In that sense, I wish…

Fall Update

Fall Update

Nedi is doing well, despite the unusual times we’re living in right now. I’m working on version 2.1 which will enhance network monitoring and management a lot. I’ll start working on new tutorials as well. If you’re curious about the current version, you can head over to the updated NeDi Demo.

Food for Thought

Food for Thought

Our roads literally getting busier by the day inspired me for this picture! I’m pretty sure we’ll be presented with a reasonable explanation as with all other questionable developments these days. I could never just go with the flow (there wouldn’t be a NeDi, if I did). Questioning the status quo of network management tools…

NeDi 2.0

NeDi 2.0

Finally! After nearly 2 decades of development, I can proudly announce a worthy two oh release! In addition I’m releasing 1.9 community edition as well. Last but not least, I’m providing NeDian20, which is a small Debian 10 appliance running NeDi 1.9C.

End of the NeDi 1.x Era

End of the NeDi 1.x Era

After 18 years of NeDi development, it’s time to move on to a 2.0 major release cycle. Looking back, it’s been a great journey so far. NeDi 1.9 is doing fine in our customer networks and 1.8C has been released to the public a few weeks ago. Version 2.0 is under heavy development and will…