Cisco Catalyst 3750 Series Switches Default Credentials Security Bypass Vulnerabilities

Bugtraq ID:	63342
Class:	Design Error
CVE:	CVE-2013-5522
Remote:	No
Local:	Yes
Published:	Oct 24 2013 12:00AM
Updated:	Oct 28 2013 12:10AM
Credit:	Cisco
Vulnerable:	Cisco Ios 15.0SE
Not Vulnerable:

Cisco Catalyst 3750 Series Switches Default Credentials Security Bypass Vulnerabilities

Cisco Catalyst 3750 series switches are prone to a security-bypass vulnerability.

Successful attacks can allow an attacker to gain complete access to the affected devices with root privileges.

This issue is tracked by Cisco Bug ID CSCue92286.

Cisco Catalyst 3750 Series Switches Default Credentials Security Bypass Vulnerabilities

Attackers can use readily available tools to exploit this issue.

Cisco Catalyst 3750 Series Switches Default Credentials Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Catalyst 3750 Series Switches Default Credentials Security Bypass Vulnerabilities

References:

• Cisco Catalyst Homepage (Cisco System)
  
• Cisco Homepage (Cisco )