CVE-2009-0742

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-26 · updated 2026-06-16
Weakness: CWE-310

Description

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.

Affected products

Cisco Ace 4710: all versions
Cisco Application Control Engine Module: all versions

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml

Get alerted when CVE-2009-0742 or the next vulnerability affects your stack