What’s Vulnerable › Vulnerabilities
CVE-2010-2468
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2010-06-25 · updated 2026-06-16
- Weakness: CWE-310
Description
The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password.
Affected products
- Linearcorp Emerge 50: all versions
- Linearcorp Emerge 5000: all versions
- S2Sys Netbox: 2.5, 3.3
- Sonitrol Eaccess: all versions
References
- http://blip.tv/file/3414004
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59827
- http://blip.tv/file/3414004
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59827
Get alerted when CVE-2010-2468 or the next vulnerability affects your stack