Description
Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges.
References
- cisco-cbos-execenable-info-disclosure(44544) vdb-entry
- 20010522 More Multiple Vulnerabilities in CBOS vendor-advisory