CVE-2012-2964

Name: CVE-2012-2964
Creator: NVD / NIST
Published: 2012-08-12T16:55:01.013+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.77%

Last modified Jun 16, 2026

CVE-2012-2964 is a vulnerability of currently unknown severity. The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.. EPSS estimates a 1.77% chance of exploitation in the next 30 days.

Description

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

Metrics

EPSS Probability

1.77%

75.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Breakingpointsystems	Breakingpoint Storm Appliance Ctm	<= 2.0
Breakingpointsystems	Breakingpoint Storm Appliance Ctm	1.2
Breakingpointsystems	Breakingpoint Storm Appliance Ctm	1.4
Breakingpointsystems	Breakingpoint Storm Appliance Ctm	1.5
Breakingpointsystems	Breakingpoint Storm Appliance	All versions

References

http://www.kb.cert.org/vuls/id/520430US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCCUS Government Resource
http://www.secureworks.com/research/advisories/SWRX-2012-006/
http://www.kb.cert.org/vuls/id/520430US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCCUS Government Resource
http://www.secureworks.com/research/advisories/SWRX-2012-006/

Timeline

Published: Aug 12, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-2964?

How severe is CVE-2012-2964?

Severity scoring for CVE-2012-2964 is pending analysis. The EPSS model estimates a 1.77% probability of exploitation in the next 30 days.

How do I fix CVE-2012-2964?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-2964?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST