When I telnet into my GSM7312 switch, I am prompted with the password, and then when I type in "enable" I am prompted with a second password. I understand the 2 levels of security, but you have to be in non-enable mode to change the password. It isn't secure at all.
For example, if I logged into the switch because I was trusted with the first password and wanted to make some configuration changes on the switch, I shouldn't be able to if I don't have the enable password. But that's no problem. I just have to type in the "enable passwd" command and change the password. Then I will know the new password because I just changed it. Then I can make all the changes I want.
What is the point of this second password? Can I disable it? Or can I at least make it so you need the current password in order to change it?
