10

CVE-2004-1760

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Emergency Responder Version1.1
Ibm ≫ Director Agent Version2.2
Ibm ≫ Director Agent Version3.11
Cisco ≫ Call Manager Version1.0
Cisco ≫ Call Manager Version2.0
Cisco ≫ Call Manager Version3.0
Cisco ≫ Call Manager Version3.1
Cisco ≫ Call Manager Version3.2
Cisco ≫ Call Manager Version3.3
Cisco ≫ Call Manager Version4.0
Cisco ≫ Conference Connection Version1.2
Ibm ≫ X330 Version8654
Ibm ≫ X330 Version8674
Ibm ≫ X340
Ibm ≫ X342
Ibm ≫ X345
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.12% 0.898
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.kb.cert.org/vuls/id/602734
Patch
Third Party Advisory
US Government Resource