« Volver al listado

CVE-2010-2467

Estado: ModificadaMedia (5)—

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Linearcorp — Emerge 50Linearcorp — Emerge 5000S2sys — NetboxSonitrol — Eaccess

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2467",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-06-25T21:30:01.610",
  "references": [
    {
      "url": "http://blip.tv/file/3414004",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.darkreading.com/blog/archives/2010/04/attacking_door.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59828",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blip.tv/file/3414004",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.darkreading.com/blog/archives/2010/04/attacking_door.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59828",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests."
    },
    {
      "lang": "es",
      "value": "S2 Security NetBox, possibly v.x y v3.x, como el usado en Linear eMerge 50 y 5000 y  Sonitrol eAccess, no requiere configurar una clave para el servidor FTP que almacena backups de datos, lo que hace sencillo para  atacantes remotos descargar ficheros backup a través de peticiones FTP no especificadas.\r\n\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:20:48.687",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:s2sys:netbox:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3922C3C5-2C55-4A0E-B75D-E60C97D40AAD"
            },
            {
              "criteria": "cpe:2.3:h:s2sys:netbox:3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65399B51-DBB1-42E0-978D-D6E1C99A5EC1"
            },
            {
              "criteria": "cpe:2.3:h:s2sys:netbox:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31F57E74-E9AE-4ED2-B19E-AA0C561B9E4F"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D0530B7-711F-4187-829F-A266ADDE8C84"
            },
            {
              "criteria": "cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA501469-8783-40D7-A52B-E47319A0F593"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "864551FE-2A80-4DFE-BF54-2D6A6470F390"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}