Existence of Many Insecure Access Channels
As industry standards ever change, ME devices may be designed with access channels using protocols (such as SNMPv1/v2 and Telnet) only for purposes of convenient management and heritance. These access channels lack security, but are not replaced with SNMPv3- or SSH-based access channels. Here, SNMP is short for Simple Network Management Protocol, and SSH is short for Secure Shell. As a result, inappropriate use of these insecure access channels may lead to information disclosure or unauthorized access.
In addition, these insecure protocols do not perform any integrity check, and attackers can tamper with protocol messages on intermediate nodes to mount attacks.