CVE Feed

    Dashboard / CVE / CVE-2010-2467

    CVE-2010-2467

    The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.

    Published:Jun 25, 2010
    Last Modified:Apr 11, 2025
    EPS:Jun 25, 2010
    EPSS Score:0.00485
    CVSS Score:5

    Affected Products

    Vendor
    Linearcorp
    Product
    Emerge 50
    Vendor
    Linearcorp
    Product
    Emerge 5000
    Vendor
    S2sys
    Product
    Netbox
    Vendor
    Sonitrol
    Product
    Eaccess

    Exploits

    http://blip.tv/file/3414004http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinaconhttp://blip.tv/file/3414004http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High