CVE-2009-0620

Cisco Application Control Engine Module < A2(1.1) - Default Credentials Exposure

Title source: llm

Description

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the administrator and (b) web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/33900

Scores

EPSS 0.0184

EPSS Percentile 76.8%

Details

CWE

CWE-255

Status published

Products (1)

cisco/application_control_engine_module < 0

Published Feb 26, 2009

Tracked Since Feb 18, 2026