CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

漏洞编号:Encrypted Management Interfaces Accessible On pfSense Device

2017年6月3日 1118点热度 0人点赞 0条评论

漏洞类别:General remote services

漏洞等级:

漏洞信息

The target is determined to be a pfSense device, which uses protocols such as SSH for configuration management. These services can be accessed and are an invitation for malicious users to break in.

If this is found externally on your network, this could invite anyone or a bot on the Internet to try to login.
If this is found internally on your network, only those who have access to your network could see the management interface.

QID Detection Logic (remote):
The remote check is based on the operating system and the available SSH service.

漏洞危害

Malicious users can exploit this vulnerability to deploy a range of known attacks against accessible services. Brute force attacks such as password guessing and Denial Of Service are also possible.

解决方案

Consider taking the following precautionary measures:

  1. Disable services that are not needed.
  2. Consider putting access controls on these services. Access controls can be put together using the features in the device (if available) or using an external firewall.
  3. Do not use default passwords and replace them with hard to guess passwords. Change passwords frequently.

0daybank

标签: 暂无
最后更新:2017年6月6日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me