Vulnerability Description
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin."
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ascadnetworks | Password Protector Sd | 1.3.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/34930Exploit
- https://www.exploit-db.com/exploits/8668
- http://www.securityfocus.com/bid/34930Exploit
- https://www.exploit-db.com/exploits/8668
FAQ
What is CVE-2009-2003?
CVE-2009-2003 is a vulnerability with a CVSS score of 7.5 (HIGH). Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin."
How severe is CVE-2009-2003?
CVE-2009-2003 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-2003?
Check the references section above for vendor advisories and patch information. Affected products include: Ascadnetworks Password Protector Sd.