‫The vulnerabilities we may come across during the penetration test are as follows lack of access control
‫list network devices provide basic traffic filtering capabilities with access control lists.
‫Access control lists can be configured for all routed network protocols to filter the packets of those
‫protocols as the packets pass through a router.
‫You can configure access control lists at your router to control access to a network access lists can
‫prevent certain traffic from entering or exiting a network.
‫Insecure password methods.
‫While creating a credential for a network device, there might be more than one method to create the
‫password for the account.
‫And some of these methods are not secure either.
‫The passwords are stored and transferred as clear text, or they are encoded or encrypted by an easy
‫to crack cipher.
‫Web interfaces to manage the network device using Web services and interfaces to manage network devices
‫brings new responsibilities.
‫First of all, you should use HTTPS instead of http to avoid clear text traffic.
‫Hardening the Web application against the vulnerabilities such as SQL injection and access as implementing
‫an appropriate authentication mechanism and access control are some other concerns of securing a web
‫application.
‫Insecure as an MP versions, S&P depends on secure strings or community strings that grant access to
‫portions of devices.
‫Management claims abuse of S&P could allow an unauthorized third party to gain access to a network device.
‫As an MP, TV3 should be the only version of an MP employed because as an MP, TV3 has the ability to
‫authenticate and encrypt payloads when either as an MP, V1 or as an MP v two are employed.
‫Like I was saying earlier, an adversary could sniff network traffic to determine the community strength.
‫You saw that happen.
‫You did it yourself.
‫This compromise could enable a man in the middle or replay attack.
‫Telnet.
‫Telnet data is sending clear text, so as you know, a man in the middle is able to read the traffic.
‫It's certainly a good idea to use, for example, SSA age to access network devices, especially when
‫going through a public network like internet.
‫And as you're probably aware, S.H. would encrypt all the data sent between the client and server.
‫And even if someone gets a hand on the data, it's of absolutely no use.
‫Non complex passwords.
‫Even if you use the right password methods, you should always use complex passwords because you are
‫always under the risk of password cracking attacks such as brute force and dictionary attacks.