5

CVE-2010-2467

Exploit
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
S2sys ≫ Netbox Version2.5
S2sys ≫ Netbox Version3.3
S2sys ≫ Netbox Version4.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.37% 0.682
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://blip.tv/file/3414004
Exploit
http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
Exploit
http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/59828