CVE-2007-2333

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the…

published April 27, 2007

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

⚠️ A couple of default accounts are your unwelcome guests at the party! The Nortel VPN Router models have default LDAP accounts that can let attackers waltz into your private network. 🔥 Think of the default accounts as a set of spare keys left under the welcome mat. Anyone who knows where to look can just stroll in, completely bypassing your front door security! If exploited, a remote attacker could gain unauthorized access to your private network, potentially leading to sensitive data exposure or manipulation. This is like leaving the doors wide open for anyone to rummage through your personal belongings—absolutely devastating!

Put simply

Think of the default accounts as a set of spare keys left under the welcome mat. Anyone who knows where to look can just stroll in, completely bypassing your front door security! This vulnerability lies in the inclusion of default FIPSecryptedtest1219 and FIPSunecryptedtest1219 LDAP accounts in various Nortel VPN Router models, allowing unauthorized access without proper authentication.

What to do

If exploited, a remote attacker could gain unauthorized access to your private network, potentially leading to sensitive data exposure or manipulation. This is like leaving the doors wide open for anyone to rummage through your personal belongings—absolutely devastating! To secure your systems, ensure you update to version 5_05.149, 5_05.304, or 6_05.140 or later. Additionally, immediately remove or disable these default accounts to tighten up your defenses! You've got this! Take these steps, and your network will be fortified in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02566 · 84.9th percentile
Published
2007-04-27T16:00Z
EPSS history
Timeline
  • 27 APR 16:00Z
    Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the…
    cvelistv5