Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-2282
HistoryApr 26, 2007 - 7:19 p.m.

CVE-2007-2282

2007-04-2619:19:00
mitre
web.nvd.nist.gov
27
cisco
network services
cns
netflow
collection engine
nfc
security vulnerability
cve-2007-2282
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

Affected configurations

Nvd
Node
cisconetflow_collection_engineMatch1.0
OR
cisconetflow_collection_engineMatch2.0
OR
cisconetflow_collection_engineMatch3.0
OR
cisconetflow_collection_engineMatch3.5
OR
cisconetflow_collection_engineMatch3.6
OR
cisconetflow_collection_engineMatch4.0
OR
cisconetflow_collection_engineMatch5.0
OR
cisconetflow_collection_engineMatch5.0.3
VendorProductVersionCPE
cisconetflow_collection_engine1.0cpe:2.3:a:cisco:netflow_collection_engine:1.0:*:*:*:*:*:*:*
cisconetflow_collection_engine2.0cpe:2.3:a:cisco:netflow_collection_engine:2.0:*:*:*:*:*:*:*
cisconetflow_collection_engine3.0cpe:2.3:a:cisco:netflow_collection_engine:3.0:*:*:*:*:*:*:*
cisconetflow_collection_engine3.5cpe:2.3:a:cisco:netflow_collection_engine:3.5:*:*:*:*:*:*:*
cisconetflow_collection_engine3.6cpe:2.3:a:cisco:netflow_collection_engine:3.6:*:*:*:*:*:*:*
cisconetflow_collection_engine4.0cpe:2.3:a:cisco:netflow_collection_engine:4.0:*:*:*:*:*:*:*
cisconetflow_collection_engine5.0cpe:2.3:a:cisco:netflow_collection_engine:5.0:*:*:*:*:*:*:*
cisconetflow_collection_engine5.0.3cpe:2.3:a:cisco:netflow_collection_engine:5.0.3:*:*:*:*:*:*:*

Related

cert 1
prion 1
cvelist 1
cisco 1
nvd 1
cert
cert
Cisco NetFlow Collection Engine contains known default passwords
2007-04-26 00:00:00
prion
prion
Default credentials
2007-04-26 19:19:00
cvelist
cvelist
CVE-2007-2282
2007-04-26 19:00:00
cisco
cisco
Default Passwords in NetFlow Collection Engine
2007-04-25 16:00:00
nvd
nvd
CVE-2007-2282
2007-04-26 19:19:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON
Related for CVE-2007-2282
cert1prion1cvelist1cisco1nvd1