high7.5Public exploit code
CVE-2000-0955
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the commun…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval2000-10-26 · remote · hardware · Verified
Impact
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Virtual Central Office 4000 | through 5.1.3 |
References
- NVD record
- CVE.org record
- http://www.atstake.com/research/advisories/2000/a102600-1.txt
- http://www.securityfocus.com/bid/1885
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5425
- http://www.atstake.com/research/advisories/2000/a102600-1.txt
- http://www.securityfocus.com/bid/1885
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5425