PT-2019-4324 · Cisco · Cisco Rv325+1

Publicado 2019-11-06 · Atualizado 2019-11-06

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco RV320 and Cisco RV325 (affected versions not specified)

Description The issue is related to the use of hardcoded credentials in the etc/shadow component of the Cisco RV320 and Cisco RV325 router firmware. This could allow a remote attacker to exploit the issue and gain elevated privileges to the level of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2020-00039

Produtos afetados

Cisco Rv320

Cisco Rv325

Referências · 2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-rv32x · Nota
• https://bdu.fstec.ru/vul/2020-00039 · Nota de Segurança