CVEvulnerability

CVE-2015-6412

9.8 CRITICAL Published 2016-01-22 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-01-22
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-255

Description

Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain access via an SSH session, aka Bug ID CSCut88070.

Affected configurations

• cisco modular encoding platform d9036 software 02.00.80 • cisco modular encoding platform d9036 software 02.01.50 • cisco modular encoding platform d9036 software 02.02.30 • cisco modular encoding platform d9036 software 02.03.30

Weakness · not in database (1)

CWE-255

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036 Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036 Vendor Advisory

CVE-2015-6412

Description

Affected configurations

Related

Weakness · not in database (1)

References