CVE-2009-0621

Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml	Patch Vendor Advisory
http://www.securityfocus.com/bid/33900
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml	Patch Vendor Advisory
http://www.securityfocus.com/bid/33900

Configurations

Configuration 1 (hide)

cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:00

Type	Values Removed	Values Added
References	~~() http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml - Patch, Vendor Advisory~~	() http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/33900 -~~	() http://www.securityfocus.com/bid/33900 -

Information

Published : 2009-02-26 16:17

Updated : 2024-11-21 01:00

NVD link : CVE-2009-0621

Mitre link : CVE-2009-0621

CVE.ORG link : CVE-2009-0621

JSON object : View

Products Affected

cisco

ace_4710

CWE

CWE-16

Configuration

{"id": "CVE-2009-0621", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-02-26T16:17:20.140", "references": [{"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/33900", "source": "ykramarz@cisco.com"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/33900", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-16"}]}], "descriptions": [{"lang": "en", "value": "Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access."}, {"lang": "es", "value": "Cisco ACE 4710 Application Control Engine Appliance anterior a vA1(8a) utiliza por defecto (1) nombre de usuario y (2) contrase\u00f1as para (a) el administrador (b) gesti\u00f3n Web y (c) gesti\u00f3n de dispositivos, lo que permite f\u00e1cilmente a los atacantes remotos realizar cambios de configuraci\u00f3n, la gesti\u00f3n de los dispositivos y otros componentes, o obtener acceso al sistema operativo."}], "lastModified": "2024-11-21T01:00:32.400", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}