Vulnerability in Cososys Endpoint Protector Appliace 4

CVE-2012-2994

The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.

EPSS: 0.063 (92.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
  • cret@cert.org (x_refsource_SECUNIA, third-party-advisory)