VulnerabilityModified

CVE-2013-5522

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

MEDIUM 6.8EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

CVSS 2.0: 6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: cisco/ios · cisco/catalyst 3750-x
Source: psirt@cisco.com

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.