Lucene search

K
cve[email protected]CVE-2006-4312
HistoryAug 23, 2006 - 10:04 p.m.

CVE-2006-4312

2006-08-2322:04:00
NVD-CWE-Other
web.nvd.nist.gov
22
cisco
pix 500
asa 5500
fwsm
vulnerability
security appliances
password change

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.3%

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a “non-random value” under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.3%

Related for CVE-2006-4312