CVE-2007-2333
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network.
Nortel VPN Router (también conocido como Contivity) 1000, 2000, 4000, y 5000 anterior a 5_05.149, 5_05.3xx anterior 5_05.304, y 6.x anterior 6_05.140 incluyen las cuentas por defecto FIPSecryptedtest1219 y FIPSunecryptedtest1219 en la plantilla LDAP, lo cual podría permitir a atacantes remotos acceder a la red privada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-04-27 CVE Reserved
- 2007-04-27 CVE Published
- 2024-04-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/35055 | Vdb Entry | |
| http://www.securityfocus.com/bid/23562 | Vdb Entry | |
| http://www.securitytracker.com/id?1017943 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/1464 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/24962 | 2011-03-08 | |
| http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null | 2011-03-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nortel Search vendor "Nortel" | Contivity Search vendor "Nortel" for product "Contivity" | 1000_vpn_switch Search vendor "Nortel" for product "Contivity" and version "1000_vpn_switch" | - |
Affected
| ||||||
| Nortel Search vendor "Nortel" | Contivity Search vendor "Nortel" for product "Contivity" | 2000_vpn_switch Search vendor "Nortel" for product "Contivity" and version "2000_vpn_switch" | - |
Affected
| ||||||
| Nortel Search vendor "Nortel" | Contivity Search vendor "Nortel" for product "Contivity" | 4000_vpn_switch Search vendor "Nortel" for product "Contivity" and version "4000_vpn_switch" | - |
Affected
| ||||||
| Nortel Search vendor "Nortel" | Vpn Router 5000 Search vendor "Nortel" for product "Vpn Router 5000" | * | - |
Affected
| ||||||
| Nortel Search vendor "Nortel" | Vpn Router Portfolio Search vendor "Nortel" for product "Vpn Router Portfolio" | * | - |
Affected
| ||||||