| ID |
CVE-2010-2467
|
| Summary |
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:h:s2sys:netbox:2.5:*:*:*:*:*:*:*
cpe:2.3:h:s2sys:netbox:2.5:*:*:*:*:*:*:*
-
cpe:2.3:h:s2sys:netbox:3.3:*:*:*:*:*:*:*
cpe:2.3:h:s2sys:netbox:3.3:*:*:*:*:*:*:*
-
cpe:2.3:h:s2sys:netbox:4.0:*:*:*:*:*:*:*
cpe:2.3:h:s2sys:netbox:4.0:*:*:*:*:*:*:*
-
cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*
cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*
-
cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*
-
cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*
cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 17-08-2017 - 01:32) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-255 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
NONE |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| refmap
via4
|
| misc | | | xf | netbox-ftpserver-file-download(59828) |
|
| Last major update |
17-08-2017 - 01:32 |
| Published |
25-06-2010 - 21:30 |
| Last modified |
17-08-2017 - 01:32 |
