PT-2001-2210 · Cisco · Cisco 600 Series Routers+1

Publicado 2001-08-31 · Atualizado 2017-12-19 · CVE-2001-1065

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco 600 series routers running CBOS versions 2.0.1 through 2.4.2ap

Description The web-based configuration utility in the affected routers binds itself to port 80, even when the web-based configuration services are disabled. This could potentially leave the router open to attack.

Recommendations For Cisco 600 series routers running CBOS versions 2.0.1 through 2.4.2ap, consider disabling the web-based configuration utility to minimize the risk of exploitation. Restrict access to port 80 to prevent potential attacks.

Correção

Identificadores relacionados

CVE-2001-1065

Produtos afetados

Cbos

Cisco 600 Series Routers

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1065 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7027 · Nota
• http://cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml · Aviso do Fabricante