Check Point Advisories

Cisco Network Registrar Default Credentials Authentication Bypass

Check Point Reference:	CPAI-2011-108
Date Published:	15 Jul 2011
Severity:	Critical
Last Updated:	Thursday 25 August, 2011
Source:
Industry Reference:	CVE-2011-2024
Protection Provided by:
Who is Vulnerable?	Cisco Systems Network Registrar prior to 7.2
Vulnerability Description	An authentication weakness vulnerability exists in Cisco Network Registrar. A remote attacker can leverage this vulnerability to authenticate with administrative privileges to the affected device and change the configuration.
Update/Patch Avaliable	Apply patches
Vulnerability Details	This is an authentication weakness vulnerability. This is caused by hard-coded default of username and password login credentials.