Risk Assessment

How can i assess the vulnerabilities of the devices like routers and switches? Is there any standard procedures (without using tools) ?can u please tell me some sites which give information about these?