← Back

CVE-2010-2467

nvd nist
Published: Jun 25, 2010Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.

Affected (6)

S2sys
1 product
Netbox
Linearcorp
2 products
Emerge 50
Emerge 5000
Sonitrol
1 product
Eaccess
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
S2sys
Netbox
Version 2.5
Netbox
Version 3.3
Netbox
Version 4.0
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Emerge 50
All versions
Emerge 5000
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Eaccess
All versions

Related CWEs

CWE-255
CWE-255

References (10)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.