PT-2009-3262 · Cisco · Cisco Ace 4710 Application Control Engine Appliance

Publicado 2009-02-26 · Atualizado 2009-02-27 · CVE-2009-0621

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ACE 4710 Application Control Engine Appliance versions prior to A1(8a)

Description The issue allows remote attackers to perform configuration changes or obtain operating-system access due to the use of default usernames and passwords for administrator, web management, and device management.

Recommendations For versions prior to A1(8a), update to A1(8a) or later to resolve the issue. As a temporary workaround, consider changing the default usernames and passwords for the administrator, web management, and device management to minimize the risk of exploitation. Restrict access to the Device Manager and other components until the update is applied.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-0621

Produtos afetados

Cisco Ace 4710 Application Control Engine Appliance

Referências · 3

• http://cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/33900 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0621 · Nota de Segurança