CVE-2023-43845

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account

Critical · published May 28, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

🚨 Default credentials are still in play! If you haven't changed the default telnet login for the Aten PE6208, you're leaving the door wide open for attackers to waltz in and take full control! 🔥 Think of it like leaving the keys to your house in the mailbox and hoping no one notices. The default telnet credentials are an invitation for trouble, allowing anyone to simply walk in without even knocking! An attacker could easily log into the telnet console and gain administrator privileges, potentially leading to unauthorized access to sensitive data, system configurations, or even a full system takeover. This could result in catastrophic consequences for your network security and data integrity!

Put simply

Think of it like leaving the keys to your house in the mailbox and hoping no one notices. The default telnet credentials are an invitation for trouble, allowing anyone to simply walk in without even knocking! The vulnerability exists due to the Aten PE6208 using default credentials for a privileged telnet account. Users are not prompted to change these credentials upon first login, leaving systems vulnerable to unauthorized access.

What to do

An attacker could easily log into the telnet console and gain administrator privileges, potentially leading to unauthorized access to sensitive data, system configurations, or even a full system takeover. This could result in catastrophic consequences for your network security and data integrity! To secure your systems, change the default telnet credentials immediately for versions 2.3.228 and 2.4.232. Additionally, consider disabling telnet entirely in favor of more secure protocols, such as SSH. Regularly audit your network for devices using default credentials! You've got this! By taking these steps, you'll elevate your security game and protect your systems like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Published
2024-05-28T18:17Z
EPSS history
Timeline
  • 28 MAY 18:17Z
    Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account
    cvelistv5