Lucene search
CertccCVE-2011-4048HistoryNov 12, 2011 - 12:55 a.m.
CVE-2011-4048
2011-11-1200:55:01
CWE-255
certcc
web.nvd.nist.gov
25
dell
kace
k2000
system deployment appliance
default credentials
remote attackers
sensitive information
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.005
Percentile
75.9%
The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.
Affected configurations
Node
dellkace_k2000_systems_deployment_appliance
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | kace_k2000_systems_deployment_appliance | * | cpe:2.3:h:dell:kace_k2000_systems_deployment_appliance:*:*:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2011-11-12 00:55:00
cert
cert
nvd
nvd
CVE-2011-4048
2011-11-12 00:55:01
cvelist
cvelist
CVE-2011-4048
2011-11-12 00:00:00
nessus
nessus
Dell KACE K2000 < 3.3.52857 Multiple Vulnerabilities
2014-02-10 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.005
Percentile
75.9%
Related for CVE-2011-4048