Unscored severity · published Jun 16, 2005
CVE-2005-2027
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain…
–
CVSS
1%
EPSS
No
On KEV
Description
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VH
Vertical Horizon-2402s · Enterasys
2.05.00; 2.05.08.01; 2.05.09.07 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2027
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2027
Patch
http://secunia.com/advisories/15757
Patch
http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf
More from Vertical Horizon-2402s
–
CVE-2005-2026
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges