« Back to list

CVE-2005-2762

Status: ModifiedLow (2.1)—

Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Avaya — Vpnremote

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2005-2762",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials."
    }
  ],
  "lastModified": "2026-06-16T22:15:37.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C34A9D34-66C8-4F80-BEE1-FE54B26C75FC"
            },
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44447C89-447B-4A44-8CCB-04BC07BC0B2A"
            },
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "033F393F-0C64-4E22-83A7-80D8B906F697"
            },
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52930C94-EFA0-4148-9DDF-D3FDD7042AE0"
            },
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5543E576-3FA0-4514-BF69-8C9A9AD1706F"
            },
            {
              "criteria": "cpe:2.3:a:avaya:vpnremote:4.2.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "835AF5F9-F693-40B5-846A-A5B52A6E9055"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}