PT-2008-1692 · Cisco · Cisco Application Velocity System

Publicado 2008-01-23 · Atualizado 2017-08-08 · CVE-2008-0029

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Application Velocity System (AVS) versions prior to 5.1.0

Description The issue allows remote attackers to gain privileges due to default passwords being used for some system accounts.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or later to change the default passwords for system accounts and prevent remote attackers from gaining privileges.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2008-0029

Produtos afetados

Cisco Application Velocity System

Referências · 6

• http://securityfocus.com/bid/27421 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0029 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0260 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39860 · Nota
• http://securitytracker.com/id?1019259 · Nota