CVE-2006-4312
Estado: ModificadaMedia (6.8)—
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.32%
- Percentil entre todas las CVEs puntuadas: 23
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/21616
- http://securitytracker.com/id?1016738
- http://securitytracker.com/id?1016739
- http://securitytracker.com/id?1016740
- http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml
- http://www.osvdb.org/28143
- http://www.securityfocus.com/bid/19681
- http://www.vupen.com/english/advisories/2006/3367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28540
- http://secunia.com/advisories/21616
- http://securitytracker.com/id?1016738
- http://securitytracker.com/id?1016739
- http://securitytracker.com/id?1016740
- http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml
- http://www.osvdb.org/28143
- http://www.securityfocus.com/bid/19681
- http://www.vupen.com/english/advisories/2006/3367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28540
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-4312",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": true,
"exploitabilityScore": 3.1,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-08-23T22:04:00.000",
"references": [
{
"url": "http://secunia.com/advisories/21616",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016738",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016739",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016740",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/28143",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/19681",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3367",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/21616",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016738",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016739",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016740",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/28143",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/19681",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3367",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a \"non-random value\" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access."
},
{
"lang": "es",
"value": "Cisco PIX 500 Series Security Appliances y ASA 5500 Series Adaptive Security Appliances, cuando ejecutan 7.0(x) hasta 7.0(5) y 7.1(x) hasta 7.1(2.4), y el Firewall Services Module (FWSM) 3.1(x) hasta 3.1(1.6), provoca que la contraseña EXEC, las contraseñas de usuario local, y la contraseña de activación se cambien a un \"valor no aleatorio\" bajo determinadas circunstancias, lo que provoca un bloqueo a los administradores y podría permitir a los atacantes obtener acceso."
}
],
"lastModified": "2026-06-16T22:28:50.110",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "151D5A44-2D0D-478A-B011-A0892817B814"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "286199EA-71CF-46B4-9131-F1752C2EA82D"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E437F4-1B19-4B57-9EAD-3AC04717E389"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29B2019F-DF6E-4924-B0D2-37094B5265F9"
},
{
"criteria": "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
},
{
"criteria": "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F867890-74A4-4892-B99A-27DB4603B873"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D80DB80-F243-469B-993F-E368B092B3C5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}