TFTP Server on Cisco Router/Switch

CartoGraph · ‎05-24-2018

Hello,

I saw, by using a port scan, that the tftp upd port is open.

Is there any threat?

It is possible to turn it off?

Thank You!

PORT   STATE         SERVICE
69/udp open|filtered tftp
Nmap done: 1 IP address (1 host up) scanned in 0.45 seconds

shimenoy · ‎05-24-2018

Hi :)

Sometimes these vulnerabilities are also present, so you should disable it if you don't need it.
e.g. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp

Please see "Workarounds".

CartoGraph · ‎05-24-2018

Thank for your reply,

I have no tftp-server lines in my configuration.

NR01#show running-config | i tftp
NR01#show running-config | i ftp
NR01#

Even so, the port seems to be open.

Any clues why and how can I turn the service off since I do not need it?

Regards.

shimenoy · ‎05-25-2018

Well, I also tried nmap with my c890(15.1(4)M1), but 69/udp is closed.
Can you post the result of the following command?

# show control-plane host open-ports