The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Broadband_operating_system |
Cisco |
* |
2.4.1 (including) |
References