Replicom ProxyView Default Password Vulnerability

Bugtraq ID:	6708
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 28 2003 12:00AM
Updated:	Jan 28 2003 12:00AM
Credit:	Discovery of this vulnerability credited to Michael Brown <[email protected]>.
Vulnerable:	Replicom ProxyView
Not Vulnerable:

Replicom ProxyView Default Password Vulnerability

It has been reported that the ProxyView device has a default undocumented password for the Administrator account for Embedded Windows NT.

An attacker can exploit this vulnerability by connecting to the ProxyView device on port 139 and login as the 'Administrator' with the undocumented password. This will provide the attacker with administrative access to the device's operating system.

Replicom ProxyView Default Password Vulnerability

There is no exploit required.

Replicom ProxyView Default Password Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Replicom ProxyView Default Password Vulnerability

References:

• Replicom (Replicom)
  
• ProxyView default undocumented password (Michael Brown )