CVE-2009-2317

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain…

published July 5, 2009

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

⚠️ Default admin password alert! The Axesstel MV 410R ships with a well-known default password, making it a prime target for remote attackers. 🔍 Think of it as leaving the front door of your house wide open with a sign saying 'Welcome! Just come in and have a look!' Anyone can stroll right in without any effort at all. If an attacker gains access, they could potentially alter settings, exfiltrate sensitive data, or even disrupt operations. It’s like giving someone the keys to your house without checking if they should have them in the first place!

Put simply

Think of it as leaving the front door of your house wide open with a sign saying 'Welcome! Just come in and have a look!' Anyone can stroll right in without any effort at all. This vulnerability arises because the Axesstel MV 410R does not enforce a password change from the factory default, allowing remote attackers to access the device easily if they know this default value.

What to do

If an attacker gains access, they could potentially alter settings, exfiltrate sensitive data, or even disrupt operations. It’s like giving someone the keys to your house without checking if they should have them in the first place! Change the default administrator password immediately to something secure and unique. Regularly audit all access credentials and ensure that users are following best practices for password management. You've got this! Follow these steps, and you'll keep your devices safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02146 · 81.9th percentile
Published
2009-07-05T16:00Z
EPSS history
Timeline
  • 05 JUL 16:00Z
    The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain…
    cvelistv5