Allied Telesyn Router/Switch Default Password

critical Nessus Plugin ID 18414

Language:

Synopsis

The remote network device can be accessed with default credentials.

Description

The remote device appears to be an Allied Telesyn router or switch that can be accessed using default credentials. An attacker could leverage this issue to gain administrative access to the affected device. This password could also be potentially used to gain other sensitive information about the network from the device.

Solution

Telnet to the device and change the default password.

Plugin Details

Severity: Critical

ID: 18414

File Name: Allied_Telesyn_telnet.nasl

Version: Revision: 1.13

Type: remote

Family: Misc.

Published: 6/3/2005

Updated: 9/24/2015

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Exploitable With

Metasploit (SNMP Community Scanner)

Reference Information

CVE: CVE-1999-0508

Detections

Analytics