Auth bypass in Opengear Acm5000 Console Server

CVE-2011-3997

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Vulnerability class: Broken Authentication

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

Opengear Acm5000_console_server
Opengear Cm4000_console_server
Opengear Im4004-5_console_server
Opengear Im4200_console_server
Opengear Img4000_console_server
Opengear Kcs6000_rackside_console_server
Opengear Opengear_console_server_firmware — versions 2.0.4, 2.0.4u1, 2.0.6
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)