Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco安全监控分析和响应系统(CS-MARS)默认管理口令漏洞
Vulnerability Description
Cisco安全监控分析和响应系统(CS-MARS)可以接受各种网络设备的时间日志，关联分析接收数据以查找安全问题，并报告结果。此外，CS-MARS还可以执行自动任务缓解安全问题。CS-MARS软件中包含有默认的管理帐号口令，成功利用这个漏洞会导致攻击者获取CS-MARS设备的完全管理权限。在安装CS-MARS设备所使用的软件时未经用户介入便设置了这个口令，在所有的产品安装中都是同一个口令。用户必须认证到CS-MARS命令行才能使用默认的口令访问管理帐号。
CVSS Information
N/A
Vulnerability Type
N/A