漏洞类别:Hardware
漏洞等级:
漏洞信息
Unauthorized users can read the last commands that were typed on the Cisco console. This vulnerability only discloses commands that were interpreted by the Cisco router, either during a local session if the Cisco router is accessed from a standard terminal, or when the Telnet service is accessed from a remote system.
By exploiting this vulnerabiliy, unauthorized users, who can connect to the Cisco router, will be able to read the last commands that were typed. They can read any character entered during a session on the Cisco router, including the router's username and password, "enable" password (the root or Administrator password) and IP addresses of other hosts networked with this router.
漏洞危害
This vulnerability may be exploited by malicious users to obtain sensitive information, which may be used to launch further attacks.
解决方案
Download the latest IOS image for your router from Cisco's Web site.
0day
文章评论