Back to search
CVE-2007-4632
Published: Aug 31, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different vulnerability than CVE-1999-0293 and CVE-2005-2105.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
25482
vdb-entry
x_refsource_BID
20070829 VTY Authentication Bypass Vulnerability
vendor-advisory
x_refsource_CISCO
oval:org.mitre.oval:def:5866
vdb-entry
signature
x_refsource_OVAL
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now