Cisco CallManager TFTP File Detection

medium Nessus Plugin ID 19507

Language:

Synopsis

A TFTP server is listening on the remote host.

Description

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. These files do not themselves include any sensitive information, but do identify the TFTP server as being part of a Cisco CallManager environment. The CCM TFTP server is an essential part of providing VOIP handset functionality, so should not be exposed to unnecessary scrutiny.

Solution

If it is not required, disable or uninstall the TFTP server. Otherwise restrict access to trusted sources only.

Plugin Details

Severity: Medium

ID: 19507

File Name: tftp_files_cisco_callmanager.nasl

Version: 1.13

Type: remote

Family: Misc.

Published: 8/26/2005

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/o:cisco

Required KB Items: Services/udp/tftp

Excluded KB Items: tftp/backdoor

Detections

Analytics