CVE-2007-2282

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-04-26

Last modified

2024-08-07

Affected products

• Netflow Collection Engine (Cisco)

References

• http://securitytracker.com/id?1017960
• http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml
• http://www.kb.cert.org/vuls/id/127545
• http://www.osvdb.org/35524
• http://www.securityfocus.com/bid/23647
• http://www.vupen.com/english/advisories/2007/1545
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33861