CVE-2009-0616: Critical severity Cisco Application Networking Manager vulnerability
Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco Application Networking Managerto a version that resolves this vulnerability.Fixed in 2.0 - Configuration
During installation or initial configuration, replace the default usernames and passwords with unique, strong credentials instead of using the provided defaults.
Cisco Application Networking Manager default user credentials during installation = unique strong administrator username and password (do not use defaults)
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0616?
CVE-2009-0616 has a moderate severity level due to the risks associated with default usernames and passwords.
How do I fix CVE-2009-0616?
To fix CVE-2009-0616, change the default usernames and passwords used in Cisco Application Networking Manager to unique, strong credentials.
Which versions of Cisco Application Networking Manager are affected by CVE-2009-0616?
CVE-2009-0616 affects Cisco Application Networking Manager versions prior to 2.0.
What exploits are associated with CVE-2009-0616?
Exploiting CVE-2009-0616 can lead to unauthorized access and potential denial of service via configuration changes.
What are the potential impacts of CVE-2009-0616 if exploited?
If exploited, CVE-2009-0616 could allow remote attackers to compromise the application and disrupt network services.