Description
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
No affected versions have been published.
Timeline
- Published
- Feb 16, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified