PT-2019-3130 · Cisco · Cisco Small Business Rv160+2
Publicado
2019-09-04
·
Atualizado
2019-09-04
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Small Business RV160, RV260, and RV340 (affected versions not specified)
Description
The issue is related to the use of hardcoded password hashes for users
root, debug-admin, cisco, admin, and guest. This could allow a remote attacker to elevate their privileges.Recommendations
For Cisco Small Business RV160, RV260, and RV340, consider changing the default passwords for the affected user accounts as a temporary mitigation measure.
Restrict access to the devices until a fix is available to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Using Hardcoded Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Small Business Rv160
Cisco Small Business Rv260
Cisco Small Business Rv340