Cisco Router Web Setup (CRWS) contains an insecure default IOS configuration

Overview A vulnerability in the Cisco Router Web Setup CRWS web configuration tool on some Cisco 800 and SOHO series routers may allow remote execution of system-level commands with no authentication. Description Cisco Router Web Setup Tool The Cisco Router Web Setup tool, or CRWS, provides a GUI...

Cisco Router Web Setup weak default security settings

By default it's possible to access IOS Web interface without authentication with highest access security level...

Cisco IOS TCLSH AAA Command Authorization Bypass (CSCeh73049)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a remote AAA command authorization bypass attack. The remote version of IOS does not enforce AAA command authorization checks for commands etnered in the TCL shell. An attacker with a shell access on the remote...

Super hacker interview how to attack Cisco router IOS-vulnerability warning-the black bar safety net

FX is the German hacking group Phenoelit one of the members, well versed in routing protocols. He 2 0 0 1 years with Michael and Lynn similar techniques to compromise a Cisco routerIOSoperating system. The following is his most recentinterview. 1you firstintroduce yourself? I am a German hacker,...

CVE-2002-2052

Cisco 2611 router running IOS 12.16.5, possibly an interim release, allows remote attackers to cause a denial of service via port scans such as 1 scanning all ports on a single host and 2 scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce...

SNMP Request Cisco Router Information Disclosure

It is possible to determine the model of the remote CISCO system by sending SNMP requests with the OID 1.3.6.1.4.1.9.1. An attacker may use this information to gain more knowledge about the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Cisco 12000 Series Router ICMP Unreachable DoS

The remote device appears to be a Cisco 12000 Series router. According to its version number, it is vulnerable to a denial of service issue. Forcing it to send a large number of ICMP unreachable packets can slow down throughput. A remote attacker could use this to degrade the performance of the...

DoS против Cisco (TCP scan)

После сканирования маршрутизатор перегружается...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

Cisco - Password Bruteforcer

Cisco - Password Bruteforcer / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in login-pass on...

Cisco Password Bruteforcer Exploit

Exploit for hardware platform in category remote exploits ================================== Cisco Password Bruteforcer Exploit ================================== / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just lo...

Cisco - Password Bruteforcer

/ .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in login-pass ones and has been succesfully...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

Cisco IOS HTTP Service GET Request Remote DoS

The remote host appears to be a Cisco router. It was possible to lock this device by sending the following request : GET /%% HTTP/1.0 You need to reboot it to make it work again. A remote attacker may use this flaw to disrupt the network. C Tenable Network Security, Inc. include"compat.inc"; if...

Cisco HTTP possible bug:

If you have: ip http server in your running config not a great idea to have on a live router IMO on your router and you do: http://router-ip/ it crashes said router. I confirmed this on my 1005 running 11.124 and another fellow said it worked on his 2621 and 2524. Though he didnt give IOS version...

CVE-1999-0159

Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt such as a login. This applies to some IOS 9.x, 10.x, and 11.x releases...

Cisco 675 Router Default Unpassworded Account

The remote CISCO router is not secured with a password. A remote attacker could log in and take complete control of this device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10045; scriptversion "1.25"; scriptcveid"CVE-1999-0889"; scriptnameenglish:"Cisco 675 Router...

PT-1999-1128

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.0 with NAT Description The issue affects Cisco routers running certain versions of IOS 12.0 with NAT enabled, where some packets may bypass input access list filters. Recommendations For versions of Cisco IOS pri...