Lucene search

K
cveMitreCVE-2007-6226
HistoryDec 04, 2007 - 6:46 p.m.

CVE-2007-6226

2007-12-0418:46:00
CWE-287
mitre
web.nvd.nist.gov
28
american power conversion
apc
ap7932
pdu
authentication bypass
remote attackers
login access
nvd
cve-2007-6226

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

Low

EPSS

0.063

Percentile

93.7%

The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits.

Affected configurations

Nvd
Node
apcoasMatch3.5.6
OR
apcswitched_rack_pdu_firmwareMatch3.5.5
VendorProductVersionCPE
apcoas3.5.6cpe:2.3:a:apc:oas:3.5.6:*:*:*:*:*:*:*
apcswitched_rack_pdu_firmware3.5.5cpe:2.3:a:apc:switched_rack_pdu_firmware:3.5.5:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

Low

EPSS

0.063

Percentile

93.7%

Related for CVE-2007-6226