The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
Affected Software
| Name | 
Vendor | 
Start Version | 
End Version | 
| Broadband_operating_system | 
Cisco | 
* | 
2.4.1 (including) | 
References