medium5.0
CVE-2010-2467
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FT…
Impact
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S2sys | Netbox | Versions 2.5, 3.3, 4.0 |
| Linearcorp | Emerge 50 | All versions |
| Linearcorp | Emerge 5000 | All versions |
| Sonitrol | Eaccess | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://blip.tv/file/3414004
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59828
- http://blip.tv/file/3414004
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59828