7.5

CVE-2007-2334

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nortel ≫ Contivity Version1000_vpn_switch
Nortel ≫ Contivity Version2000_vpn_switch
Nortel ≫ Contivity Version4000_vpn_switch
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.61% 0.728
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/24962
Patch
Vendor Advisory
http://www.securityfocus.com/bid/23562
http://www.vupen.com/english/advisories/2007/1464
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
Patch
Vendor Advisory
http://www.securitytracker.com/id?1017943
Patch
http://osvdb.org/35056