Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-4312

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

Published

2006-08-23T22:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.1

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware cisco pix_firewall_501 * Yes
Hardware cisco pix_firewall_506 * Yes
Hardware cisco pix_firewall_515 * Yes
Hardware cisco pix_firewall_515e * Yes
Hardware cisco pix_firewall_520 * Yes
Hardware cisco pix_firewall_525 * Yes
Hardware cisco pix_firewall_535 * Yes
Operating System cisco pix_firewall_software 6.3 Yes
Hardware cisco adaptive_security_appliance * Yes
References