Cisco Set and Secure Password - Detect
ID: set-and-secure-passwords
Severity: info
Author: pussycat0x
Tags: audit,file,cisco,config-audit,cisco-switch
Description
Section titled “Description”Cisco set and secure password functionality is recommended to control privilege level access. To set a local password to control access to various privilege levels, use the enable password command in global configuration mode. To remove the password requirement, use the no form of this command.
YAML Source
Section titled “YAML Source”id: set-and-secure-passwords
info: name: Cisco Set and Secure Password - Detect author: pussycat0x severity: info description: | Cisco set and secure password functionality is recommended to control privilege level access. To set a local password to control access to various privilege levels, use the enable password command in global configuration mode. To remove the password requirement, use the no form of this command. reference: - https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-e1.html#wp3884449514 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cvss-score: 0 cwe-id: CWE-200 tags: audit,file,cisco,config-audit,cisco-switch
file: - extensions: - conf
matchers-condition: and matchers: - type: word words: - "service password-encryption" negative: true
- type: word words: - "configure terminal"
# Enhanced by md on 2023/05/03# digest: 4b0a00483046022100938ac298dd7b5a4cd1a053badbb94a1d68c695a2a7340b7ccaec50d31d8b969a022100943a305d393873270073311b06f942fa29c6e829953c70b5de06e66349c72cf1:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "file/audit/cisco/set-and-secure-passwords.yaml"