The vulnerabilities we may come across during the penetration test are as follows lack of access control
list network devices provide basic traffic filtering capabilities with access control list.
Access control lists can be configured for all routed network protocols to filter the packets of those
protocols as the packets pass through a router.
You can configure access control list at your router to control access to a network access list can
prevent certain traffic from entering or exiting a network.
Insecure password methods.
While creating a credential for a network device, there might be more than one method to create the
password for the account, and some of these methods are not secure either.
The passwords are stored and transferred as clear text, or they're encoded or encrypted by an easy
to crack cipher.
Web interfaces to manage the network device using Web services and interfaces to manage network devices
brings new responsibilities.
First of all, you should use https instead of HTTP to avoid clear text traffic.
Hardening the Web application against the vulnerability such as a school injection and access, implementing
an appropriate authentication mechanism and access control are some other concerns of securing a Web
application.
Insecure as an MP versions, as an MP depends on secure strings or community strings that grant access
to portions of devices management plans, abusive as MP could allow an unauthorised third party to gain
access to a network device.
As an MP, V3 should be the only version of an MP employed because as an MP, V3 has the ability to
authenticate and encrypt payloads when either as an MPV one or as an MP two are employed.
Like I was saying earlier, an adversary could sniff network traffic to determine the community's strength.
You saw that happen.
You did it yourself.
This compromise could enable a man in the middle or replay attack.
Telnet.
Telnet data is sending clear text, so as you know, a man in the middle is able to read the traffic.
It's certainly a good idea to use, for example, S.H., to access network devices, especially when
going through a public network like Internet.
And as you're probably aware, S.H. would encrypt all the data sent between the client and server,
and even if someone gets a hand on the data, it's of absolutely no use.
Non complex passwords, even if you use the right password methods, you should always use complex passwords
because you are always under the risk of password cracking attacks such as brute force and dictionary
attacks.