Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9f2x-x83c-j7w8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to an affected system by using this account. A successful exploit could allow the attacker to log in by using this account with root privileges.

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to an affected system by using this account. A successful exploit could allow the attacker to log in by using this account with root privileges.

EPSS

Процентиль: 27%
0.00096
Низкий

7.8 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.8
nvd
больше 5 лет назад

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to an affected system by using this account. A successful exploit could allow the attacker to log in by using this account with root privileges.

CVSS3: 8.4
fstec
больше 5 лет назад

Уязвимость программно-определяемой сети Cisco SD-WAN, связанная с использованием жестко закодированных учетных данных, позволяющая нарушителю повысить свои привилегии до уровня root

EPSS

Процентиль: 27%
0.00096
Низкий

7.8 High

CVSS3

Дефекты

CWE-522