CVE-2007-2333 Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default acc...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel contivity | = 1000_vpn_switch | No fix listed |
| nortel contivity | = 2000_vpn_switch | No fix listed |
| nortel contivity | = 4000_vpn_switch | No fix listed |
| nortel vpn router 5000 | All versions | No fix listed |
| nortel vpn router portfolio | All versions | No fix listed |
References
- 35055 vdb-entry
- 24962 patch third-party-advisory vendor-advisory
- 23562 vdb-entry
- 1017943 vdb-entry
- ADV-2007-1464 vdb-entry
- www130.nortelnetworks.com patch