{"api_version":"1","generated_at":"2026-07-23T13:12:41+00:00","cve":"CVE-2010-2465","urls":{"html":"https://cve.report/CVE-2010-2465","api":"https://cve.report/api/cve/CVE-2010-2465.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2465","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2465"},"summary":{"title":"CVE-2010-2465","description":"The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-06-25 21:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/41134","name":"http://www.securityfocus.com/bid/41134","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2","name":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"StackPath","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon","name":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"We Don\\'t Need no Stinkin Badges:  hacking Electronic Door Access Controllers" -- Shawn Merdinger @  Carolinacon","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://blip.tv/file/3414004","name":"http://blip.tv/file/3414004","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Shawn Merdinger - We Don't Need No Stinking Badges","mime":"text/html","httpstatus":"521","archivestatus":"200"},{"url":"http://secunia.com/advisories/40374","name":"http://secunia.com/advisories/40374","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Linear eMerge Directory Access Security Bypass Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html","name":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/251133","name":"http://www.kb.cert.org/vuls/id/251133","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#251133","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/65757","name":"http://osvdb.org/65757","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8","name":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"S2 Security Information for VU#251133","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2465","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2465","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"linearcorp","cpe5":"emerge_50","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"linearcorp","cpe5":"emerge_5000","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"s2sys","cpe5":"netbox","cpe6":"2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"s2sys","cpe5":"netbox","cpe6":"3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"s2sys","cpe5":"netbox","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"sonitrol","cpe5":"eaccess","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:32:16.885Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html"},{"name":"40374","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40374"},{"name":"VU#251133","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/251133"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon"},{"name":"65757","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/65757"},{"name":"41134","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41134"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://blip.tv/file/3414004"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-03-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-07-13T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html"},{"name":"40374","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40374"},{"name":"VU#251133","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/251133"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8"},{"tags":["x_refsource_MISC"],"url":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2"},{"tags":["x_refsource_MISC"],"url":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon"},{"name":"65757","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/65757"},{"name":"41134","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41134"},{"tags":["x_refsource_MISC"],"url":"http://blip.tv/file/3414004"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2465","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html","refsource":"MISC","url":"http://www.darkreading.com/blog/archives/2010/04/attacking_door.html"},{"name":"40374","refsource":"SECUNIA","url":"http://secunia.com/advisories/40374"},{"name":"VU#251133","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/251133"},{"name":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8","refsource":"CONFIRM","url":"http://www.kb.cert.org/vuls/id/MAPG-83TQL8"},{"name":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2","refsource":"MISC","url":"http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2"},{"name":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon","refsource":"MISC","url":"http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon"},{"name":"65757","refsource":"OSVDB","url":"http://osvdb.org/65757"},{"name":"41134","refsource":"BID","url":"http://www.securityfocus.com/bid/41134"},{"name":"http://blip.tv/file/3414004","refsource":"MISC","url":"http://blip.tv/file/3414004"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2465","datePublished":"2010-06-25T21:00:00.000Z","dateReserved":"2010-06-25T00:00:00.000Z","dateUpdated":"2024-08-07T02:32:16.885Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-06-25 21:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:s2sys:netbox:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3922C3C5-2C55-4A0E-B75D-E60C97D40AAD"},{"vulnerable":true,"criteria":"cpe:2.3:h:s2sys:netbox:3.3:*:*:*:*:*:*:*","matchCriteriaId":"65399B51-DBB1-42E0-978D-D6E1C99A5EC1"},{"vulnerable":true,"criteria":"cpe:2.3:h:s2sys:netbox:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31F57E74-E9AE-4ED2-B19E-AA0C561B9E4F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*","matchCriteriaId":"8D0530B7-711F-4187-829F-A266ADDE8C84"},{"vulnerable":true,"criteria":"cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"EA501469-8783-40D7-A52B-E47319A0F593"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*","matchCriteriaId":"864551FE-2A80-4DFE-BF54-2D6A6470F390"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2465","Ordinal":"1","Title":"CVE-2010-2465","CVE":"CVE-2010-2465","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2465","Ordinal":"1","NoteData":"The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.","Type":"Description","Title":"CVE-2010-2465"},{"CveYear":"2010","CveId":"2465","Ordinal":"2","NoteData":"2010-06-25","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"2465","Ordinal":"3","NoteData":"2010-07-13","Type":"Other","Title":"Modified"}]}}}