PT-1999-1100 · Cisco · Cisco 7Xx Series Routers

Published 1999-03-11 · Updated 2008-09-09 · CVE-1999-0415

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 7xx series routers versions 3.2 through 4.2

Description The HTTP server in the affected routers is enabled by default. This setup allows remote attackers to change the router's configuration.

Recommendations For versions 3.2 through 4.2, disable the HTTP server to prevent unauthorized configuration changes.

Fix

Related Identifiers

CVE-1999-0415

Affected Products

Cisco 7Xx Series Routers

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0415 · Security Note
• http://cisco.com/warp/public/770/7xxconn-pub.shtml · Note
• http://ciac.llnl.gov/ciac/bulletins/j-034.shtml · Note