CVE-2010-2469 - The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which mak

CVE-2010-2469

Summary

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device.

References

http://blip.tv/file/3414004
http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon

Vulnerable Configurations

cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*
cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*
cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 28-06-2010 - 04:00)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc

http://blip.tv/file/3414004
http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon

Last major update

28-06-2010 - 04:00

Published

25-06-2010 - 21:30

Last modified

28-06-2010 - 04:00