乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-07-30: 细节已通知厂商并且等待厂商处理中 2015-07-30: 厂商已经确认,细节仅向厂商公开 2015-08-09: 细节向核心白帽子及相关领域专家公开 2015-08-19: 细节向普通白帽子公开 2015-08-29: 细节向实习白帽子公开 2015-09-13: 细节向公众公开
多好的设备也怕弱口令不是?
域名指向:office.tongbanjie.com 122.224.137.178ssh存在弱口令cisco:cisco enable密码:cisco
TBJ-ASA5520# show versionCisco Adaptive Security Appliance Software Version 8.2(5)Device Manager Version 6.4(5)Compiled on Fri 20-May-11 16:00 by buildersSystem image file is "disk0:/asa825-k8.bin"Config file at boot was "startup-config"TBJ-ASA5520 up 46 days 9 hoursHardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHzInternal ATA Compact Flash, 256MBBIOS Flash Firmware Hub @ 0xffe00000, 1024KBEncryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0) Boot microcode : CN1000-MC-BOOT-2.00 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05 0: Ext: GigabitEthernet0/0 : address is d0d0.fd52.acf4, irq 9 1: Ext: GigabitEthernet0/1 : address is d0d0.fd52.acf5, irq 9 2: Ext: GigabitEthernet0/2 : address is d0d0.fd52.acf6, irq 9 3: Ext: GigabitEthernet0/3 : address is d0d0.fd52.acf7, irq 9 4: Ext: Management0/0 : address is d0d0.fd52.acf8, irq 11 5: Int: Not used : irq 11 6: Int: Not used : irq 5Licensed features for this platform:Maximum Physical Interfaces : UnlimitedMaximum VLANs : 150Inside Hosts : UnlimitedFailover : Active/ActiveVPN-DES : EnabledVPN-3DES-AES : EnabledSecurity Contexts : 2GTP/GPRS : DisabledSSL VPN Peers : 2Total VPN Peers : 750Shared License : DisabledAnyConnect for Mobile : DisabledAnyConnect for Cisco VPN Phone : DisabledAnyConnect Essentials : DisabledAdvanced Endpoint Assessment : DisabledUC Phone Proxy Sessions : 2Total UC Proxy Sessions : 2Botnet Traffic Filter : DisabledThis platform has an ASA 5520 VPN Plus license.Serial Number: JMX17388017Running Activation Key: 0x8705f55a 0x98000de9 0xb832a5e8 0xa6a45c0c 0x0f0f389bConfiguration register is 0x1Configuration last modified by admin at 18:48:33.211 UTC Wed Jul 29 2015
改密码。
危害等级:中
漏洞Rank:5
确认时间:2015-07-30 13:52
感谢您的报告。
暂无