PT-2007-5758 · Ibm · Ibm Surepos 500

Published 2007-08-30 · Updated 2024-02-14 · CVE-2007-4598

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM SurePOS 500 (affected versions not specified)

Description The issue concerns default password settings. Specifically, it has a default password of "12345" for the manager and blank default passwords for operator accounts.

Recommendations For the manager account, change the default password "12345" to a strong and unique password. For operator accounts, set a strong and unique password to replace the blank default password.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2007-4598

Affected Products

Ibm Surepos 500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4598 · Security Note
• http://hackerfactor.com/papers/cc-pos-20.pdf · Note
• http://isc.sans.org/diary.html?storyid=3323 · Note
• http://osvdb.org/45835 · Note
• http://collegeid.com/SurePOS%20500%20Manual.pdf · Note