CVE-2013-7382 in VICIDIAL

요약

\~에 의해 MITRE

VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2014. 05. 17.
• 공개: 2014. 05. 17.
• 모더레이션: 수락
• 항목: VDB-69718
• CPE: 준비됨
• CWE: CWE-255 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 5.0 (NVD)
• EPSS: 0.02789
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-7382
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-7382
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-7382/