Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Cisco 'tech-support' Anonymous User Debugging Information Disclosure



The remote host is vulnerable to a flaw that allows attackers to retrieve sensitive files or data.


Cisco routers and switches ship with a default web interface that allows remote administrators to view the entire configuration via the web. Unfortunately, many of these devices are not password protected and allow anonymous users to download critical router/switch configuration information. An attacker can download the Cisco configuration file by browsing to /exec/show/tech-support/cr


Enable passwords for the Cisco IOS web server.