Lucene search

MitreCVE-2008-6577

HistoryApr 01, 2009 - 10:30 p.m.

CVE-2008-6577

2009-04-0122:30:01

CWE-255

mitre

web.nvd.nist.gov

nortel

cs1k

4.50.x

hard-coded accounts

passwords

privilege escalation

cve-2008-6577

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.017

Percentile

87.8%

JSON

Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges.

Affected configurations

Nvd

Node

nortelcs1000Match4.50

VendorProductVersionCPE
nortelcs10004.50cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nortel	cs1000	4.50	cpe:2.3:h:nortel:cs1000:4.50:::::::*

References

osvdb.org/44374

secunia.com/advisories/29747

securitytracker.com/id?1019848

support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455

www.securityfocus.com/bid/28691

www.voipshield.com/research-details.php?id=14

exchange.xforce.ibmcloud.com/vulnerabilities/41802

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.017

Percentile

87.8%

JSON

Related for CVE-2008-6577