CVE-2007-6226

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-04 · updated 2026-06-16
Weakness: CWE-287

Description

The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits.

Affected products

Apc Oas: 3.5.6
Apc Switched Rack Pdu Firmware: 3.5.5

References

http://securityreason.com/securityalert/3418
http://securitytracker.com/id?1019018
http://www.securityfocus.com/archive/1/484363/100/0/threaded
http://www.securityfocus.com/bid/26636
https://exchange.xforce.ibmcloud.com/vulnerabilities/38783
http://securityreason.com/securityalert/3418
http://securitytracker.com/id?1019018
http://www.securityfocus.com/archive/1/484363/100/0/threaded
http://www.securityfocus.com/bid/26636
https://exchange.xforce.ibmcloud.com/vulnerabilities/38783

Get alerted when CVE-2007-6226 or the next vulnerability affects your stack