CVE-2009-0620

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the…

published February 26, 2009

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

⚠️ Default credentials are still in play! This vulnerability in the Cisco ACE Application Control Engine makes it far too easy for attackers to stroll in using factory-set usernames and passwords. 🔥 Imagine leaving the front door of your business wide open with a sign that says, 'Welcome, anyone can come in!' That's the kind of security faux pas we're dealing with here — a recipe for disaster! With default admin credentials still active, an attacker could waltz right in and change configurations or even gain operating system access. This makes your network an easy target, potentially leading to unauthorized changes that could disrupt operations or expose sensitive data.

Put simply

Imagine leaving the front door of your business wide open with a sign that says, 'Welcome, anyone can come in!' That's the kind of security faux pas we're dealing with here — a recipe for disaster! CVE-2009-0620 involves Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers, which uses default usernames and passwords, making it vulnerable to unauthorized access and configuration changes by remote attackers.

What to do

With default admin credentials still active, an attacker could waltz right in and change configurations or even gain operating system access. This makes your network an easy target, potentially leading to unauthorized changes that could disrupt operations or expose sensitive data. To protect your system, change the default usernames and passwords immediately. Regularly audit your security settings and ensure robust access controls are in place. Don't forget to update to the latest firmware version if applicable! You've got this! Strengthen your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01839 · 78.8th percentile
Published
2009-02-26T16:00Z
EPSS history
Timeline
  • 26 FEB 16:00Z
    Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the…
    cvelistv5