CVE-2009-0622

CVE-2009-0622 affects Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Multiple vulnerabilities exist, including default credentials (leading to credential compromise and potential OS access via the device CLI), privilege escalation for authenticate...

CVE-2009-0620

Cisco ACE vulnerabilities (CVE-2009-0620, and related CVEs in the same advisory) affect the Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and the Cisco ACE 4710 Appliance. The core issue is default credentials: default administrator and web-management accounts are used, enabl...

CVE-2009-0625

CVE-2009-0625 affects Cisco ACE 4710 Appliance and Cisco ACE Module for Catalyst 6500/7600. The Cisco advisory details multiple separate vulnerabilities: Default usernames and passwords (affecting ACE 4710 before A1(8a) and ACE Module before A2(1.2/1.1)); Privilege Escalation (ACE 4710 before A1(...

CVE-2009-0623

The CVE-2009-0623 entry applies to Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Affected vulnerabilities include Crafted SSH Packet which can cause the device to reload (DoS) when SSH access is configured. The Cisco advisory lists affected compo...

CVE-2009-0624

CVE-2009-0624 affects Cisco ACE 4710 Appliance and Cisco ACE Module for Catalyst 6500/7600, with vulnerability in SNMP handling. A crafted SNMP packet (SNMPv1 noted, SNMPv2c must be enabled to process) can cause the device to reload, resulting in a DoS. Affected versions are prior to A3(2.1) for ...

CVE-2009-0742

CVE-2009-0742 affects Cisco ACE Platform components (ACE Application Control Engine Module for Catalyst 6500/7600 and ACE 4710 Appliance). The issue is that the username command stores a cleartext password by default, enabling context-dependent attackers to obtain sensitive information. The NVD e...

CVE-2012-3919

CVE-2012-3919 affects the Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers. The issue is that the ACE module does not properly monitor Load Balancer (LB) queues, which can lead to a denial of service via application traffic, described as an incorrect...