Lucene search

K
nvd[email protected]NVD:CVE-2007-6226
HistoryDec 04, 2007 - 6:46 p.m.

CVE-2007-6226

2007-12-0418:46:00
CWE-287
web.nvd.nist.gov
3

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

Low

EPSS

0.063

Percentile

93.7%

The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits.

Affected configurations

Nvd
Node
apcoasMatch3.5.6
OR
apcswitched_rack_pdu_firmwareMatch3.5.5
VendorProductVersionCPE
apcoas3.5.6cpe:2.3:a:apc:oas:3.5.6:*:*:*:*:*:*:*
apcswitched_rack_pdu_firmware3.5.5cpe:2.3:a:apc:switched_rack_pdu_firmware:3.5.5:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7

Confidence

Low

EPSS

0.063

Percentile

93.7%

Related for NVD:CVE-2007-6226