CVE-2013-7382 - VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access

Back Back to CVE browser

MEDIUM

VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access

Published May 17, 2014

5.0

MEDIUM

CVSS 2.0

EPSS 2.79%

Description

VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-255

References (5)

http://www.exploit-db.com/exploits/29513
exploitx_refsource_EXPLOIT-DB
http://www.openwall.com/lists/oss-security/2013/10/23/10
mailing-listx_refsource_MLISTExploit
http://www.openwall.com/lists/oss-security/2013/10/25/1
mailing-listx_refsource_MLISTExploit
https://adamcaudill.com/2013/10/23/vicidial-multiple-vulnerabilities/
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-7148
Advisory

Link	Providers	Tags
http://www.exploit-db.com/exploits/29513		exploitx_refsource_EXPLOIT-DB
http://www.openwall.com/lists/oss-security/2013/10/23/10		mailing-listx_refsource_MLISTExploit
http://www.openwall.com/lists/oss-security/2013/10/25/1		mailing-listx_refsource_MLISTExploit
https://adamcaudill.com/2013/10/23/vicidial-multiple-vulnerabilities/		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-7148		Advisory