VulnerabilityModified
CVE-2005-2984
Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port.
MEDIUM 4.6EPSS 1.80%
Does this matter?
Lower severity and a low EPSS score (1.80%). Track it; it rarely justifies an emergency change on its own.
Description
Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.80% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- data center resources/avocent
- Source
- cve@mitre.org
References
- http://drwetter.org/cs-probs/avocent-sshbug.txtExploit
- http://marc.info/?l=bugtraq&m=112680615103315&w=2
- http://secunia.com/advisories/16836/Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14853Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22302
- http://drwetter.org/cs-probs/avocent-sshbug.txtExploit
- http://marc.info/?l=bugtraq&m=112680615103315&w=2
- http://secunia.com/advisories/16836/Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14853Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22302
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.