PT-2012-4420

CVE-2012-2994

·

Published

2012-09-18

·

Updated

2013-03-02

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions CoSoSys Endpoint Protector version 4
Description The issue allows remote attackers to gain access via a brute-force attack because the EPProot password is based entirely on the appliance serial number.
Recommendations For CoSoSys Endpoint Protector version 4, consider changing the EPProot password to a strong, unique value that does not rely on the appliance serial number to prevent brute-force attacks.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾