TFTP Server on Cisco Router/Switch

[CartoGraph]

Hello,

I saw, by using a port scan, that the tftp upd port is open.

Is there any threat?

It is possible to turn it off?

Thank You!

PORT   STATE         SERVICE
69/udp open|filtered tftp
Nmap done: 1 IP address (1 host up) scanned in 0.45 seconds

[shimenoy]

Hi :)

Sometimes these vulnerabilities are also present, so you should disable it if you don't need it.
e.g. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp

Please see "Workarounds".

[CartoGraph]

Thank for your reply,

I have no tftp-server lines in my configuration.

NR01#show running-config | i tftp
NR01#show running-config | i ftp
NR01#

Even so, the port seems to be open.

Any clues why and how can I turn the service off since I do not need it?

Regards.

[shimenoy]

Well, I also tried nmap with my c890(15.1(4)M1), but 69/udp is closed.
Can you post the result of the following command?

# show control-plane host open-ports