CVE-2002-0769

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-05/0083.html
http://www.cisco.com/warp/public/707/ata186-password-disclosure.shtml
Vendor Advisory
http://www.iss.net/security_center/static/9056.php
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9057.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4711
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4712
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-05/0083.html
http://www.cisco.com/warp/public/707/ata186-password-disclosure.shtml
Vendor Advisory
http://www.iss.net/security_center/static/9056.php
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9057.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4711
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4712
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:cisco:ata-186:*:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05453

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6pgq-jgqc-vp7f

github

почти 4 года назад