| Cisco Router Web Setup Ships with Insecure Default IOS Configuration |
| Wednesday, 12 July 2006 | |
| The default Cisco IOS configuration shipped with the Cisco Router Web Setup (CRWS) application allows the execution of commands at privilege level 15 through the Cisco IOS HTTP (Hypertext Transfer Protocol) server web interface without requiring authentication credentials. Privilege level 15 is the highest privilege level on Cisco IOS. devices. |
