PT-1998-1211 · Nbase · Nh2048+3

Published 1998-07-20 · Updated 2016-10-18 · CVE-1999-1420

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NBase switches NH2012, NH2012R, NH2015, and NH2048

Description The issue concerns a back door password in the affected switches that cannot be disabled. This allows remote attackers to modify the switch's configuration.

Recommendations For NH2012, consider restricting remote access to the switch until a fix is available. For NH2012R, restrict remote access to the switch until a fix is available. For NH2015, restrict remote access to the switch until a fix is available. For NH2048, restrict remote access to the switch until a fix is available. As a temporary workaround, consider disabling remote configuration capabilities for all affected switches until a patch is available.

Fix

Related Identifiers

CVE-1999-1420

Affected Products

Nh2012

Nh2012R

Nh2015

Nh2048

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1420 · Security Note
• http://marc.info/?l=bugtraq&m=90221104526065&w=2 · Note
• http://securityfocus.com/bid/212 · Note
• http://marc.info/?l=bugtraq&m=90221104526016&w=2 · Note