| Vulnerability Name: | CVE-2002-0769 (CCN-9056) | ||||||||
| Assigned: | 2002-05-09 | ||||||||
| Published: | 2002-05-09 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters. | ||||||||
| CVSS v3 Severity: | 6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||
| References: | Source: BUGTRAQ Type: UNKNOWN 20020509 Cisco ATA-186 admin password can be trivially circumvented Source: CCN Type: BugTraq Mailing List, Thu May 09 2002 - 12:30:11 CDT Cisco ATA-186 admin password can be trivially circumvented Source: MITRE Type: CNA CVE-2002-0769 Source: CCN Type: Cisco Systems Inc. Security Advisory, 2004 March 29 01:00 GMT ATA-186 Password Disclosure Vulnerability Source: CISCO Type: Vendor Advisory 20020523 ATA-186 Password Disclosure Vulnerability Source: XF Type: Patch, Vendor Advisory cisco-ata-reveal-info(9056) Source: XF Type: Patch, Vendor Advisory cisco-ata-bypass-auth(9057) Source: BID Type: Exploit, Patch, Vendor Advisory 4711 Source: CCN Type: BID-4711 Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability Source: BID Type: Vendor Advisory 4712 Source: CCN Type: BID-4712 Cisco ATA-186 Web Administration Authentication Bypass Vulnerability Source: XF Type: UNKNOWN cisco-ata-reveal-info(9056) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Vulnerability Name: | CVE-2002-0769 (CCN-9057) | ||||||||
| Assigned: | 2002-05-09 | ||||||||
| Published: | 2002-05-09 | ||||||||
| Updated: | 2002-05-09 | ||||||||
| Summary: | If a remote attacker using the Cisco ATA-186 Web interface submits several specially-crafted change password requests, the attacker could bypass authentication and gain unauthorized administrative access to the device. An attacker could use this vulnerability to change the device's configuration. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
| ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Thu May 09 2002 - 12:30:11 CDT Cisco ATA-186 admin password can be trivially circumvented Source: MITRE Type: CNA CVE-2002-0769 Source: CCN Type: Cisco Systems Inc. Security Advisory, 2004 March 29 01:00 GMT ATA-186 Password Disclosure Vulnerability Source: CCN Type: BID-4711 Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability Source: CCN Type: BID-4712 Cisco ATA-186 Web Administration Authentication Bypass Vulnerability Source: XF Type: UNKNOWN cisco-ata-bypass-auth(9057) | ||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||