Test ID:	1.3.6.1.4.1.25623.1.0.106450
Category:	CISCO
Title:	Cisco IOS XR Software Default Credentials Vulnerability (cisco-sa-20161207-iosxr)
Summary:	A vulnerability in Cisco IOS XR Software could allow an; authenticated, local attacker to log in to the device with the privileges of the root user.
Description:	Summary: A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. Vulnerability Insight: The vulnerability is due to a user account that has a default and static password. An attacker could exploit this vulnerability by connecting to the affected system using this default account. Vulnerability Impact: An exploit could allow the attacker to log in with the default credentials, allowing the attacker to gain complete control of the underlying operating system. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9215 BugTraq ID: 94812 http://www.securityfocus.com/bid/94812 http://www.securitytracker.com/id/1037418
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.