CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Use of Hard-coded Credentials
Summary: integrated data protection appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. these accounts have limited privileges and can access certain system files only. a malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-11-02
Last Modified Date: 2019-01-30