CVE-2009-0621

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-26 · updated 2026-06-16
Weakness: CWE-16

Description

Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access.

Affected products

Cisco Ace 4710: all versions

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
http://www.securityfocus.com/bid/33900
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
http://www.securityfocus.com/bid/33900

Get alerted when CVE-2009-0621 or the next vulnerability affects your stack