PT-2016-1109 · Cisco · Cisco Modular Encoding Platform D9036

Publicado 2016-01-22 · Atualizado 2016-01-25 · CVE-2015-6412

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Modular Encoding Platform D9036 Software versions prior to 02.04.70

Description The issue arises from hardcoded root and guest passwords in the software, making it easier for remote attackers to gain access via an SSH session. This could allow a remote attacker to obtain access to sensitive information by establishing an SSH connection.

Recommendations For versions prior to 02.04.70, update to version 02.04.70 or later to resolve the issue. As a temporary workaround, consider restricting SSH access to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

BDU:2016-00303

CVE-2015-6412

Produtos afetados

Cisco Modular Encoding Platform D9036

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00303 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-6412 · Nota de Segurança