Description
Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.
References
- cisco-cbos-web-config(7027) vdb-entry
- 20010823 CBOS Web-based Configuration Utility Vulnerability vendor-advisory