CVEvulnerability
CVE-2007-4747
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier does not require authentication, which allows remote attackers to perform administrative actions, aka CSCsj31729.
Affected configurations
• cisco video surveillance ip gateway encoder decoder (<= 1.8.1)
• cisco video surveillance sp isp decoder software (<= 1.11.0)
• cisco video surveillance sp isp (<= 1.23.7)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://osvdb.org/37503 osvdb.org
- http://secunia.com/advisories/26721 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml Vendor Advisory
- http://www.securityfocus.com/bid/25549 www.securityfocus.com
- http://www.securitytracker.com/id?1018655 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36449 exchange.xforce.ibmcloud.com
- http://osvdb.org/37503 osvdb.org
- http://secunia.com/advisories/26721 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml Vendor Advisory
- http://www.securityfocus.com/bid/25549 www.securityfocus.com
- http://www.securitytracker.com/id?1018655 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36449 exchange.xforce.ibmcloud.com