Описание
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.00:*:*:*:*:*:*:*
cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.08.01:*:*:*:*:*:*:*
cpe:2.3:h:enterasys:vertical_horizon-2402s:2.05.09.07:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00305
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
EPSS
Процентиль: 53%
0.00305
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other