Quanta LB6M security warning

Discussion in 'Networking' started by jthm, Apr 6, 2018.

  1. jthm

    jthm New Member

    Joined:
    Mar 3, 2016
    Messages:
    2
    Likes Received:
    4
    I'm someone crazy enough to run an LB6M in production (I can afford a hot spare and a cold spare at their prices), and recently noted a security hole during a vulnerability scan.

    Apparently the LB6M has a "guest" user with empty password. This is not visible in "show running-config", or in a saved configuration. It is visible with "show running-config all".

    If you are like me with a strong password on an administrative user, but no enable password, you are not secure. I was able to run "no user guest" and prevent login with the guest user, but I see no difference in the running-config, or a new saved config. No idea if or how that change is persistent.

    Best practice is to change the management interface and make sure you have an enable password.
     
    #1
  2. Tracy Phillips

    Tracy Phillips New Member

    Joined:
    Jan 24, 2015
    Messages:
    1
    Likes Received:
    0
    Thank you for this info!

    What are you using for scanning?
     
    #2
  3. mrkrad

    mrkrad Well-Known Member

    Joined:
    Oct 13, 2012
    Messages:
    1,228
    Likes Received:
    49
    does this switch have web interface? as a brocade?
     
    #3
  4. mixmansc

    mixmansc Member

    Joined:
    Feb 15, 2016
    Messages:
    44
    Likes Received:
    25
    No web interface on the LB6M.....
     
    #4
  5. Vince123

    Vince123 New Member

    Joined:
    Sep 1, 2017
    Messages:
    6
    Likes Received:
    0
    Any reason why someone shouldn't run the LB6M in production, even after flashing with Turboiron 24x ?
     
    #5
  6. frogtech

    frogtech Well-Known Member

    Joined:
    Jan 4, 2016
    Messages:
    1,095
    Likes Received:
    113
    Probably because there's no vendor support backing it in case of outages that need a relatively quick turn around time for obscure issues.
     
    #6
    Tha_14 and fohdeesha like this.
Similar Threads: Quanta LB6M
Forum Title Date
Networking Quanta LB6M dead console until reboot Nov 20, 2018
Networking [solved] Quanta LB6M connection to Mellanox ConnectX-4 /5 Nov 19, 2018
Networking Quanta LB6M ...? Buying assistance; fast -- but as easy as possible. Sep 17, 2018
Networking Error Revert Quanta LB6M to Fastpath Sep 7, 2018
Networking Quanta LB6M port down Jul 27, 2018

Share This Page