CVE-2016-1307

CWE-255CWE-287 — Improper AuthenticationCWE-2644 documents4 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 63.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Zyxel Gs1900-10hp FirmwareZzinc Keymouse Firmware
Timeline
PublishedFeb 7
Latest updateMay 17

Description

The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

▶NVDzyxel/gs1900-10hp_firmware< 2.50\(aazi.0\)c0

🔴Vulnerability Details

2
GHSA
GHSA-fvf3-v835-pwvx: The Openfire server in Cisco Finesse Desktop 10↗2022-05-17
▶
CVEList
CVE-2016-1307: The Openfire server in Cisco Finesse Desktop 10↗2016-02-07
▶

📋Vendor Advisories

1
Cisco
Cisco Finesse Desktop and Cisco Unified Contact Center Express Applications XMPP Unauthorized Access Vulnerability↗2016-02-02
▶
CVE-2016-1307 (MEDIUM CVSS 5.4) | The Openfire server in Cisco Finess | cvebase.io