PT-2009-3257 · Cisco · Cisco Application Networking Manager

Published 2009-02-26 · Updated 2009-03-03 · CVE-2009-0616

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Application Networking Manager (ANM) versions prior to 2.0

Description The issue allows remote attackers to access the application or cause a denial of service via configuration changes due to the use of default usernames and passwords during installation.

Recommendations For versions prior to 2.0, change the default usernames and passwords to custom, secure credentials as soon as possible to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-0616

Affected Products

Cisco Application Networking Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2009-0616 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml · Vendor Advisory
• http://securitytracker.com/id?1021771 · Note
• http://securityfocus.com/bid/33903 · Note