Network UPS Tools Plaintext Authentication

NASLDB: Network UPS Tools Plaintext Authentication

General

ID: 59659
Name: Network UPS Tools Plaintext Authentication

Summary: Checks if the server supports encrypted authentication

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 3493
Family: Misc.
Type: Remote

Description

The remote Network UPS Tools instance does not support exchanging
credentials through an encrypted channel. An unauthenticated, remote
attacker may be able to perform a man-in-the-middle attack, intercept
credentials, and alter the settings on the UPS that the server
manages.