Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1694
symantec
on command
ccm
icommand
default credentials
remote access
unauthorized access
cve-2004-1694
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.
Affected configurations
Node
symantecon_command_ccmMatch5.0
ORsymantecon_command_ccmMatch5.1
ORsymantecon_command_ccmMatch5.2
ORsymantecon_command_ccmMatch5.3
ORsymantecon_command_ccmMatch5.4
ORsymantecon_icommandMatch3.0
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2004-1694