CVE-2007-2282

critical Cisco
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
1.6%
Exploitation probability in 30 days
Top 18% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: April 26, 2007 (6957 days ago)
Last Modified: April 23, 2026
Vendor: Cisco
Source: NVD

Description

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

CWE

NVD-CWE-Other

Affected Products

cisco netflow collection engine

References

🔗 securitytracker.com 🔗 www.cisco.com 🔗 www.kb.cert.org 🔗 www.osvdb.org 🔗 www.securityfocus.com