VULHUB ™

The Cisco SN 5420 Storage Router is a device that provides universal data storage functionality over an IP network. A problem in the default configuration of the router could enable remote users to gain unauthenticated access to its debugging functionality. The router is shipped with a passwordless developer's shell used during product development and testing. When logged into the developer's shell, it is possible for a user to execute debug commands, start and stop processes, and interfere with normal process execution. The router's standard logging mechanism does not log users logged in with this shell or the commands executed from it.

The Cisco SN 5420 Storage Router is a device that provides universal data storage functionality over an IP network. A problem in the default configuration of the router could enable remote users to gain unauthenticated access to its debugging functionality. The router is shipped with a passwordless developer's shell used during product development and testing. When logged into the developer's shell, it is possible for a user to execute debug commands, start and stop processes, and interfere with normal process execution. The router's standard logging mechanism does not log users logged in with this shell or the commands executed from it.