This has come up a few times. If you have read/write SNMP access then
it's pretty simple.
You can set a new password, or update running config in any other way
using OID 1.3.6.1.4.1.9.2.1.53.x.x.x.x <file>
The x.x.x.x specifies a tftp server and file specifies a file to UPLOAD
to the router. This file could contain perhaps one line:
'enable secret password'
This then resets the Cisco enable password to 'password' within running
config so no reboot etc. is needed and yer existing config is untouched.
regards
Greg Jones
> -----Original Message-----
> From: Rob Iles [mailto:Robert.Iles_at_ntlworld.com]
> Sent: 05 January 2002 18:20
> To: pen-test_at_securityfocus.com
> Subject: Cisco 2501 Router
>
>
> Al, I appreciate this doesn't pertain to pen-testing exactly,
> but I hope
> the expertise of list members may be able to assist me. If
> you choose not
> to pass it, I'd quite understand!
>
> Thanks.
>
>
> List,
> I am in the unfortunate (some would say careless)
> position of not having
> the password for one of our critical Cisco 2501 Routers.
> Does anyone know
> of a way to obtain the password? Wiping the configuration
> completely is
> not an option. I have SNMP access to the device, and can also
> connect via
> a console cable if necessary.
>
> Any assistance *greatly* appreciated!
>
> Regards,
>
> RI.
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Jan 06 2002