CVE-2000-0784 sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rapidstream | = 2000 | No fix listed |
| rapidstream | = 4000 | No fix listed |
| rapidstream | = 6000 | No fix listed |
| rapidstream | = 8000 | No fix listed |
References
- 20000816 Remote Root Compromise On All RapidStream VPN Appliances mailing-list patch vendor-advisory
- 1574 patch vdb-entry vendor-advisory