CVE-2007-3232
Last modified
CVE-2007-3232 is a vulnerability of currently unknown severity. The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000.. EPSS estimates a 3.30% chance of exploitation in the next 30 days.
Description
The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Totalstorage Ds400 | 4.15 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3232?
How severe is CVE-2007-3232?
How do I fix CVE-2007-3232?
Are you affected by CVE-2007-3232?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
