CVE-2007-2282
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/04/2007
Last modified:
09/04/2025
Description
Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:cisco:netflow_collection_engine:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:3.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:3.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:5.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:netflow_collection_engine:5.0.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://securitytracker.com/id?1017960=
- http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml
- http://www.kb.cert.org/vuls/id/127545
- http://www.osvdb.org/35524
- http://www.securityfocus.com/bid/23647
- http://www.vupen.com/english/advisories/2007/1545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33861
- http://securitytracker.com/id?1017960=
- http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml
- http://www.kb.cert.org/vuls/id/127545
- http://www.osvdb.org/35524
- http://www.securityfocus.com/bid/23647
- http://www.vupen.com/english/advisories/2007/1545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33861