VAR-200704-0470
Vulnerability from variot - Updated: 2025-04-10 23:23Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system. A vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system. This issue stems from a design flaw that makes an insecure account available to remote users. Versions of Cisco NFC prior to 6.0 are vulnerable to this issue. Cisco is tracking this issue as Cisco Bug ID CSCsh75038. When NFC is installed, a default user account will be created and a corresponding password will be set. NFC is installed on a supported UNIX platform. During the installation process, a default web-based user account nfcuser is created, which is used to perform application maintenance, configuration, and troubleshooting with the password nfcuser. Before version 6.0, the Linux installation program will also create a local user named nfcuser on the operating system, and the default password is exactly the same as the user name. If the account already exists, the Linux installer will change the password to be the same as the username
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200704-0470",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "5.0.3"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "5.0"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "4.0"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "3.6"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "3.5"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "3.0"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "2.0"
},
{
"model": "netflow collection engine",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "1.0"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "netflow collection engine",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "6.0"
},
{
"model": "netflow collection engine",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "6.0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "BID",
"id": "23647"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:cisco:netflow_collection_engine",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security bulletin",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
}
],
"trust": 0.6
},
"cve": "CVE-2007-2282",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2007-2282",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-25644",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-2282",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#127545",
"trust": 0.8,
"value": "7.50"
},
{
"author": "NVD",
"id": "CVE-2007-2282",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200704-523",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-25644",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "VULHUB",
"id": "VHN-25644"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system. A vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system. This issue stems from a design flaw that makes an insecure account available to remote users. \nVersions of Cisco NFC prior to 6.0 are vulnerable to this issue. \nCisco is tracking this issue as Cisco Bug ID CSCsh75038. When NFC is installed, a default user account will be created and a corresponding password will be set. NFC is installed on a supported UNIX platform. During the installation process, a default web-based user account nfcuser is created, which is used to perform application maintenance, configuration, and troubleshooting with the password nfcuser. Before version 6.0, the Linux installation program will also create a local user named nfcuser on the operating system, and the default password is exactly the same as the user name. If the account already exists, the Linux installer will change the password to be the same as the username",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-2282"
},
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "BID",
"id": "23647"
},
{
"db": "VULHUB",
"id": "VHN-25644"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#127545",
"trust": 3.6
},
{
"db": "NVD",
"id": "CVE-2007-2282",
"trust": 2.5
},
{
"db": "BID",
"id": "23647",
"trust": 2.0
},
{
"db": "SECTRACK",
"id": "1017960",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2007-1545",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "35524",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20070425 DEFAULT PASSWORDS IN NETFLOW COLLECTION ENGINE",
"trust": 0.6
},
{
"db": "XF",
"id": "33861",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-25644",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "VULHUB",
"id": "VHN-25644"
},
{
"db": "BID",
"id": "23647"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"id": "VAR-200704-0470",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-25644"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:23:43.649000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20070425-nfc",
"trust": 0.8,
"url": "http://www.cisco.com/en/US/products/csa/cisco-sa-20070425-nfc.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.8,
"url": "http://www.kb.cert.org/vuls/id/127545"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/23647"
},
{
"trust": 1.7,
"url": "http://www.cisco.com/en/us/products/products_security_advisory09186a008082c520.shtml"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/35524"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1017960"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/1545"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33861"
},
{
"trust": 0.8,
"url": "about vulnerability notes"
},
{
"trust": 0.8,
"url": "contact us about this vulnerability"
},
{
"trust": 0.8,
"url": "provide a vendor statement"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-2282"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-2282"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2007/1545"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/33861"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/sw/netmgtsw/ps1964/index.html"
},
{
"trust": 0.3,
"url": "/archive/1/466832"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20070425-nfc.shtml"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "VULHUB",
"id": "VHN-25644"
},
{
"db": "BID",
"id": "23647"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#127545"
},
{
"db": "VULHUB",
"id": "VHN-25644"
},
{
"db": "BID",
"id": "23647"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-04-26T00:00:00",
"db": "CERT/CC",
"id": "VU#127545"
},
{
"date": "2007-04-26T00:00:00",
"db": "VULHUB",
"id": "VHN-25644"
},
{
"date": "2007-04-25T00:00:00",
"db": "BID",
"id": "23647"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"date": "2007-04-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"date": "2007-04-26T19:19:00",
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-06-14T00:00:00",
"db": "CERT/CC",
"id": "VU#127545"
},
{
"date": "2017-07-29T00:00:00",
"db": "VULHUB",
"id": "VHN-25644"
},
{
"date": "2007-04-26T21:10:00",
"db": "BID",
"id": "23647"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001895"
},
{
"date": "2007-04-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200704-523"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-2282"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco NetFlow Collection Engine contains known default passwords",
"sources": [
{
"db": "CERT/CC",
"id": "VU#127545"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "23647"
},
{
"db": "CNNVD",
"id": "CNNVD-200704-523"
}
],
"trust": 0.9
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…