CVE Feed

    Dashboard / CVE / CVE-2009-0742

    CVE-2009-0742

    The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.

    Published:Feb 26, 2009
    Last Modified:Apr 23, 2026
    EPS:Feb 26, 2009
    EPSS Score:0.00251
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Ace 4710
    Vendor
    Cisco
    Product
    Application Control Engine Module
    Vendor
    Cisco
    Product
    Catalyst 6500
    Vendor
    Cisco
    Product
    Catalyst 7600

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2010-2823 (CVSS 7.8) — Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) …
    CVE-2010-2825 (CVSS 7.8) — Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module w…
    CVE-2010-2822 (CVSS 7.8) — Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module …
    CVE-2010-1576 (CVSS 7.5) — The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engin…
    CVE-2010-2629 (CVSS 7.5) — The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE)…
    CVE-2009-0624 (CVSS 6.8) — Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Cat…
    CVE-2009-0625 (CVSS 7.8) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…
    CVE-2009-0622 (CVSS 9) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…
    CVE-2009-0621 (CVSS 10) — Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords…
    CVE-2009-0623 (CVSS 7.8) — Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 R…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High