The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Broadband_operating_system | Cisco | * | 2.4.1 (including) |
References