CVE-2007-6226

The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2007-12-04

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Oas (Apc)
• Switched Rack Pdu Firmware (Apc)

References

• http://securityreason.com/securityalert/3418
• http://securitytracker.com/id?1019018
• http://www.securityfocus.com/archive/1/484363/100/0/threaded
• http://www.securityfocus.com/bid/26636
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38783