Vulnerability Details CVE-2009-0742
The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.4%
CVSS Severity
CVSS v2 Score 7.8
Products affected by CVE-2009-0742
-
cpe:2.3:h:cisco:ace_4710:*
-
cpe:2.3:h:cisco:application_control_engine_module:*
-
cpe:2.3:h:cisco:catalyst_6500:-
-
cpe:2.3:h:cisco:catalyst_7600:-