CVE-1999-1420

NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's…

published September 12, 2001

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

🚨 A hidden backdoor password in NBase switches means a remote attacker might just take the keys to your network configuration! šŸ”„ Think of it like a restaurant that has a secret entrance only the staff knows about — anyone with that info can come and go as they please, restructuring your menu and taking control without you ever noticing! An attacker could potentially modify critical settings on the switch, leading to unauthorized access or even service disruption. This could be absolutely devastating if they decide to reroute traffic or worse!

Put simply

Think of it like a restaurant that has a secret entrance only the staff knows about — anyone with that info can come and go as they please, restructuring your menu and taking control without you ever noticing! The vulnerability exists in NBase switches NH2012, NH2012R, NH2015, and NH2048, where a hardcoded backdoor password allows unauthorized remote access to modify the switch's configuration.

What to do

An attacker could potentially modify critical settings on the switch, leading to unauthorized access or even service disruption. This could be absolutely devastating if they decide to reroute traffic or worse! While no patch currently exists, the best immediate step is to ensure your network is segmented and monitor access logs for any suspicious activity. Additionally, consider replacing vulnerable devices if feasible and keep an eye on vendor updates in case remediation becomes available. You've got this! Stay vigilant and proactive, and you'll keep your network safe! šŸ›”ļø

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02901 Ā· 86.9th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's…
    cvelistv5