PT-2009-3262 · Cisco · Cisco Ace 4710 Application Control Engine Appliance

Published 2009-02-26 · Updated 2009-02-27 · CVE-2009-0621

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ACE 4710 Application Control Engine Appliance versions prior to A1(8a)

Description The issue allows remote attackers to perform configuration changes or obtain operating-system access due to the use of default usernames and passwords for administrator, web management, and device management.

Recommendations For versions prior to A1(8a), update to A1(8a) or later to resolve the issue. As a temporary workaround, consider changing the default usernames and passwords for the administrator, web management, and device management to minimize the risk of exploitation. Restrict access to the Device Manager and other components until the update is applied.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2009-0621

Affected Products

Cisco Ace 4710 Application Control Engine Appliance

References · 3

• http://cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0621 · Security Note
• http://securityfocus.com/bid/33900 · Note