Lucene search
HistorySep 18, 2012 - 3:48 a.m.
CVE-2012-2994
cososys
endpoint protector
cve-2012-2994
appliance
vulnerability
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.1%
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected configurations
Node
cososysendpoint_protector_appliace_4
| CPE | Name | Operator | Version |
|---|---|---|---|
| cososys:endpoint_protector_appliace_4 | cososys endpoint protector appliace 4 | eq | * |
Related
prion
prion
Code injection
2012-09-18 03:48:00
nvd
nvd
CVE-2012-2994
2012-09-18 03:48:28
cert
cert
cvelist
cvelist
CVE-2012-2994
2012-09-18 01:00:00
nessus
nessus
CoSoSys Endpoint Protector 4 Predictable Password
2012-11-16 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.1%
Related for CVE-2012-2994