6.8

CVE-2006-4312

EPSS 0.07%
Published 23.08.2006 22:04:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Pix Firewall 501

Cisco ≫ Pix Firewall 506

Cisco ≫ Pix Firewall 515

Cisco ≫ Pix Firewall 515e

Cisco ≫ Pix Firewall 520

Cisco ≫ Pix Firewall 525

Cisco ≫ Pix Firewall 535

Cisco ≫ Pix Firewall Software Version6.3

Cisco ≫ Adaptive Security Appliance

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.186

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	3.1	10	AV:L/AC:L/Au:S/C:C/I:C/A:C

http://secunia.com/advisories/21616

http://securitytracker.com/id?1016738

http://securitytracker.com/id?1016739

http://securitytracker.com/id?1016740

http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml

Vendor Advisory

http://www.osvdb.org/28143

http://www.securityfocus.com/bid/19681

http://www.vupen.com/english/advisories/2006/3367

https://exchange.xforce.ibmcloud.com/vulnerabilities/28540

https://nvd.nist.gov/vuln/detail/CVE-2006-4312

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4312

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4312

EUVD