Cisco 6400 NRP2 Unauthenticated Telnet Access (CSCdt65960)

This script is (C) 2002-2014 Tenable Network Security, Inc.


Synopsis :

The remote device is missing a vendor-supplied security patch.

Description :

The Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2)
module allows Telnet access when no password has been set. The
correct response is to disallow any remote access to the module until
the password has been set. This vulnerability may result in users
gaining unintended access to secure systems.

This vulnerability is documented as Cisco bug ID CSCdt65960.

Solution :

http://www.nessus.org/u?63852177

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS Temporal Score : 6.5
(CVSS2#E:H/RL:OF/RC:C)
Public Exploit Available : true

Family: CISCO

Nessus Plugin ID: 10981 (CSCdt65960.nasl)

Bugtraq ID: 2874

CVE ID: CVE-2001-0757