10

CVE-2007-2282

EPSS 1.62%
Veröffentlicht 26.04.2007 19:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Netflow Collection Engine Version1.0

Cisco ≫ Netflow Collection Engine Version2.0

Cisco ≫ Netflow Collection Engine Version3.0

Cisco ≫ Netflow Collection Engine Version3.5

Cisco ≫ Netflow Collection Engine Version3.6

Cisco ≫ Netflow Collection Engine Version4.0

Cisco ≫ Netflow Collection Engine Version5.0

Cisco ≫ Netflow Collection Engine Version5.0.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.62%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://securitytracker.com/id?1017960

http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml

Vendor Advisory

http://www.kb.cert.org/vuls/id/127545

US Government Resource

http://www.osvdb.org/35524

http://www.securityfocus.com/bid/23647

http://www.vupen.com/english/advisories/2007/1545

https://exchange.xforce.ibmcloud.com/vulnerabilities/33861

https://nvd.nist.gov/vuln/detail/CVE-2007-2282

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2282

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2282

EUVD