CVE-2007-2282

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-26 · updated 2026-06-16

Description

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

Affected products

Cisco Netflow Collection Engine: 1.0, 2.0, 3.0, 3.5, 3.6, 4.0 (+2)

References

http://securitytracker.com/id?1017960
http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml
http://www.kb.cert.org/vuls/id/127545
http://www.osvdb.org/35524
http://www.securityfocus.com/bid/23647
http://www.vupen.com/english/advisories/2007/1545
https://exchange.xforce.ibmcloud.com/vulnerabilities/33861
http://securitytracker.com/id?1017960
http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml
http://www.kb.cert.org/vuls/id/127545
http://www.osvdb.org/35524
http://www.securityfocus.com/bid/23647

Get alerted when CVE-2007-2282 or the next vulnerability affects your stack