Description
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
References
- cisco-cbos-invalid-login(5628) vdb-entry
- 20001204 Multiple Vulnerabilities in CBOS vendor-advisory