What’s Vulnerable › Vulnerabilities

CVE-2007-4598

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-08-30 · updated 2026-06-16
• Weakness: CWE-255

Description

IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator accounts.

Affected products

• IBM Surepos 500: all versions

References

• http://isc.sans.org/diary.html?storyid=3323
• http://osvdb.org/45835
• http://www.collegeid.com/SurePOS%20500%20Manual.pdf
• http://www.hackerfactor.com/papers/cc-pos-20.pdf
• http://isc.sans.org/diary.html?storyid=3323
• http://osvdb.org/45835
• http://www.collegeid.com/SurePOS%20500%20Manual.pdf
• http://www.hackerfactor.com/papers/cc-pos-20.pdf

Get alerted when CVE-2007-4598 or the next vulnerability affects your stack