CVE-2012-1288

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2012-02-23

Last modified

2024-09-16

Weaknesses

CWE-255

Affected products

• Utc Fire & Security Ge-mc100-ntp/gps-zb Master Clock Device (Utc)

References

• http://www.kb.cert.org/vuls/id/707254