Banner grabbing and finding publicly known exploits

Bruteforce telnet password

Run following nmap scripts

telnet-brute.nse

telnet-encryption.nse

telnet-ntlm-info.nse