Alcatel OmniSwitch Default Credentials (ftp)

critical Nessus Plugin ID 70210

Language:

Synopsis

The remote device can be accessed with default credentials via FTP.

Description

It is possible to log into the remote Alcatel OmniSwitch by providing the default credentials via FTP. A remote attacker could exploit this to gain administrative control of the remote device.

Solution

Change the default password or block access to the port.

Plugin Details

Severity: Critical

ID: 70210

File Name: alcatel_aos_default_ftp_creds.nasl

Version: Revision: 1.5

Type: remote

Family: FTP

Published: 9/30/2013

Updated: 3/7/2017

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/h:alcatel-lucent:omniswitch, cpe:/o:alcatel:aos

Excluded KB Items: global_settings/supplied_logins_only

Detections

Analytics