PT-2010-4510 · Cisco · Cisco Unified Videoconferencing (Uvc) System

Florent Daigniere · Publicado 2010-11-22 · Atualizado 2010-12-10 · CVE-2010-3038

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Videoconferencing (UVC) System versions 5110 and 5115

Description The issue allows remote attackers to obtain access due to default passwords for the root, cs, and develop accounts. This makes it easier for attackers to gain access via the FTP or SSH daemon.

Recommendations For Cisco Unified Videoconferencing (UVC) System versions 5110 and 5115, change the default passwords for the root, cs, and develop accounts to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-3038

Produtos afetados

Cisco Unified Videoconferencing (Uvc) System

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-3038 · Nota de Segurança
• http://trustmatta.com/advisories/MATTA-2010-001.txt · Nota
• http://cisco.com/en/US/products/products_security_response09186a0080b56d0d.html · Aviso do Fabricante
• http://securitytracker.com/id?1024753 · Nota
• http://securityfocus.com/bid/44924 · Nota
• http://seclists.org/fulldisclosure/2010/Nov/167 · Nota