« Volver al listado

CVE-2007-4598

Estado: ModificadaMedia (4.6)—

El IBM SurePOS 500 tiene (1) una contraseña por defecto que es la "12345" para el administrador y (2) una contraseña por defecto que está en blanco para las cuentas de operador.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Surepos 500

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4598",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-30T18:17:00.000",
  "references": [
    {
      "url": "http://isc.sans.org/diary.html?storyid=3323",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/45835",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.collegeid.com/SurePOS%20500%20Manual.pdf",
      "tags": [
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.hackerfactor.com/papers/cc-pos-20.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://isc.sans.org/diary.html?storyid=3323",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/45835",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.collegeid.com/SurePOS%20500%20Manual.pdf",
      "tags": [
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.hackerfactor.com/papers/cc-pos-20.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM SurePOS 500 has (1) a default password of \"12345\" for the manager and (2) blank default passwords for operator accounts."
    },
    {
      "lang": "es",
      "value": "El IBM SurePOS 500 tiene (1) una contraseña por defecto que es la \"12345\" para el administrador y (2) una contraseña por defecto que está en blanco para las cuentas de operador."
    }
  ],
  "lastModified": "2026-06-16T22:44:24.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:surepos_500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D3F44F5-BA11-4D4E-B923-0010598973FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}