CVEvulnerability
CVE-2007-6226
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-287
Description
The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits.
Affected configurations
• apc oas 3.5.6
• apc switched rack pdu firmware 3.5.5
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://securityreason.com/securityalert/3418 securityreason.com
- http://securitytracker.com/id?1019018 securitytracker.com
- http://www.securityfocus.com/archive/1/484363/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26636 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38783 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3418 securityreason.com
- http://securitytracker.com/id?1019018 securitytracker.com
- http://www.securityfocus.com/archive/1/484363/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26636 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38783 exchange.xforce.ibmcloud.com