Lucene search
HistoryFeb 08, 2000 - 5:00 a.m.
CVE-2000-0109
cve-2000-0109
multicsp
standard and poor's
comstock
no passwords
default passwords
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.6%
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor’s ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
Affected configurations
Node
comstockmulticspMatch4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| comstock:multicsp | comstock multicsp | eq | 4.2 |
Related
nessus
nessus
Standard & Poor's ComStock MultiCSP Detection
2000-05-25 00:00:00
nvd
nvd
CVE-2000-0109
2000-01-31 05:00:00
cvelist
cvelist
CVE-2000-0109
2000-02-08 05:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.6%
Related for CVE-2000-0109