Cisco Media Experience Engine 5600 Default Credentials Authentication Bypass Vulnerability

Bugtraq ID:	48078
Class:	Design Error
CVE:	CVE-2011-1623
Remote:	Yes
Local:	No
Published:	Jun 01 2011 12:00AM
Updated:	Jun 01 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Media Experience Engine (MXE) 5600 1.1 Cisco Media Experience Engine (MXE) 5600 1.0
Not Vulnerable:	Cisco Media Experience Engine (MXE) 5600 1.2 Cisco Media Experience Engine (MXE) 3000 0

Cisco Media Experience Engine 5600 Default Credentials Authentication Bypass Vulnerability

Cisco Media Experience Engine 5600 is prone to a remote authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized administrative access to the affected device. Successful exploits will result in the complete compromise of the affected device.

This issue is being tracked by Cisco bug ID CSCto77737.

Cisco Media Experience Engine 5600 Default Credentials Authentication Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Media Experience Engine 5600 Default Credentials Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the referenced advisory for details.

Cisco Media Experience Engine 5600 Default Credentials Authentication Bypass Vulnerability

References:

• Media Experience Engine 5600 Homepage (Cisco)
  
• Cisco Security Advisory: Default Credentials for root Account on the Cisco Media (Cisco)