Lucene search
HistoryJun 15, 2007 - 1:30 a.m.
CVE-2007-3232
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.3%
The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000.
Affected configurations
Node
ibmtotalstorage_ds400Match4.15
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | totalstorage_ds400 | 4.15 | cpe:2.3:h:ibm:totalstorage_ds400:4.15:*:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2007-06-15 01:30:00
cve
cve
CVE-2007-3232
2007-06-15 01:30:00
cvelist
cvelist
CVE-2007-3232
2007-06-15 01:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.3%
Related for NVD:CVE-2007-3232