CVE Feed

    Dashboard / CVE / CVE-2009-0621

    CVE-2009-0621

    Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access.

    Published:Feb 26, 2009
    Last Modified:Apr 23, 2026
    EPS:Feb 26, 2009
    EPSS Score:0.00458
    CVSS Score:10

    Affected Products

    Vendor
    Cisco
    Product
    Ace 4710

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2010-2823 (CVSS 7.8) — Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) …
    CVE-2010-2825 (CVSS 7.8) — Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module w…
    CVE-2010-2822 (CVSS 7.8) — Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module …
    CVE-2010-1576 (CVSS 7.5) — The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engin…
    CVE-2010-2629 (CVSS 7.5) — The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE)…
    CVE-2009-0624 (CVSS 6.8) — Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Cat…
    CVE-2009-0625 (CVSS 7.8) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…
    CVE-2009-0622 (CVSS 9) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…
    CVE-2009-0742 (CVSS 7.8) — The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Router…
    CVE-2009-0623 (CVSS 7.8) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High