CVEvulnerability
CVE-2007-4746
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier have default passwords for the sypixx and root user accounts, which allows remote attackers to perform administrative actions, aka CSCsj34681.
Affected configurations
• cisco video surveillance ip gateway encoder decoder (<= 1.8.1)
• cisco video surveillance sp isp decoder software (<= 1.11.0)
• cisco video surveillance sp isp (<= 1.23.7)
Related
Weakness · not in database (1)
References
- http://osvdb.org/37502 osvdb.org
- http://secunia.com/advisories/26721 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml Vendor Advisory
- http://www.securityfocus.com/bid/25549 www.securityfocus.com
- http://www.securitytracker.com/id?1018655 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36451 exchange.xforce.ibmcloud.com
- http://osvdb.org/37502 osvdb.org
- http://secunia.com/advisories/26721 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml Vendor Advisory
- http://www.securityfocus.com/bid/25549 www.securityfocus.com
- http://www.securitytracker.com/id?1018655 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36451 exchange.xforce.ibmcloud.com