First published: Thu Jun 16 2005(Updated: )
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Enterasys Vertical Horizon-2402s | =2.05.09.07 | |
Enterasys Vertical Horizon-2402s | =2.05.00 | |
Enterasys Vertical Horizon-2402s | =2.05.08.01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2027 is considered a medium severity vulnerability due to its potential for unauthorized access to sensitive information.
To fix CVE-2005-2027, upgrade the firmware of Enterasys Vertical Horizon VH-2402S to version 2.05.05.09 or later.
Exploiting CVE-2005-2027 could allow attackers to execute debugging commands and gain access to sensitive information.
Firmware versions prior to 2.05.05.09, including 2.05.00 and 2.05.08.01, are affected by CVE-2005-2027.
Users of Enterasys Vertical Horizon VH-2402S devices running affected firmware versions are at risk from CVE-2005-2027.