The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/5628 | vdb entry |
http://www.cisco.com/warp/public/707/CBOS-multiple.shtml | vendor advisory |