PT-2018-12819 · Harmonic · Harmonic Nsg 9000

Publicado 2018-08-05 · Atualizado 2018-10-17 · CVE-2018-14943

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Harmonic NSG 9000 (affected versions not specified)

Description The issue concerns default passwords for certain accounts on the Harmonic NSG 9000 device. Specifically, the admin account has a default password of nsgadmin, the guest account has a default password of nsgguest, and the config account has a default password of nsgconfig.

Recommendations For the Harmonic NSG 9000, change the default passwords for the admin, guest, and config accounts to unique and secure passwords as soon as possible to prevent unauthorized access.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-14943

Produtos afetados

Harmonic Nsg 9000

Referências · 2

• https://github.com/pudding2/NSG9000/blob/master/exp.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-14943 · Nota de Segurança