What’s Vulnerable › Vulnerabilities

CVE-2010-2467

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-06-25 · updated 2026-06-16
• Weakness: CWE-255

Description

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.

Affected products

• Linearcorp Emerge 50: all versions
• Linearcorp Emerge 5000: all versions
• S2Sys Netbox: 2.5, 3.3, 4.0
• Sonitrol Eaccess: all versions

References

• http://blip.tv/file/3414004
• http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
• http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
• http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59828
• http://blip.tv/file/3414004
• http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
• http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
• http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59828

Get alerted when CVE-2010-2467 or the next vulnerability affects your stack