Lucene search
+L

46 matches found

Prion
Prion
added 2009/02/26 4:17 p.m.15 views

Default credentials

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information...

7.8CVSS7.1AI score0.01061EPSS
SaveExploits0References1
Prion
Prion
added 2009/02/26 4:17 p.m.25 views

Design/Logic Flaw

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18a allows remote authenticated users to execute arbitrary operating-system commands through a command...

9CVSS7.8AI score0.0147EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2009/02/26 4:0 p.m.67 views

CVE-2009-0615

CVE-2009-0615 concerns directory traversal in Cisco ANM before 2.0 and ACE Device Manager before A3(2.1). Exploitation by an authenticated remote user could read/modify arbitrary files, potentially exposing host OS data due to invalid directory permissions. Related CVEs cover additional ANM flaws...

9CVSS6.3AI score0.02035EPSS
SaveExploits1References3Affected Software2
CVE
CVE
added 2009/02/26 4:0 p.m.65 views

CVE-2009-0622

CVE-2009-0622 affects Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Multiple vulnerabilities exist, including default credentials (leading to credential compromise and potential OS access via the device CLI), privilege escalation for authenticate...

9CVSS7.4AI score0.0147EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2009/01/08 7:30 p.m.27 views

CVE-2008-3819

dnsserver in Cisco Application Control Engine Global Site Selector GSS before 3.01 allows remote attackers to cause a denial of service daemon crash via a series of crafted DNS requests, aka Bug ID CSCsj70093...

5CVSS6.4AI score0.01397EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2009/01/08 7:0 p.m.31 views

CVE-2008-3819

dnsserver in Cisco Application Control Engine Global Site Selector GSS before 3.01 allows remote attackers to cause a denial of service daemon crash via a series of crafted DNS requests, aka Bug ID CSCsj70093...

6.4AI score0.01397EPSS
SaveExploits1References4
Rows per page
Query Builder