CVE-2007-2282

CRITICAL 10.0CVE-2007-2282 · Published 26/04/2007 · updated 16/06/2026

In short

CVE-2007-2282 is a CRITICAL (CVSS 10.0) vulnerability affecting netflow collection engine (cisco).
Chance of exploitation in the next 30 days (EPSS): 4.7%, higher than 91.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netflow collection engine cisco	`= 1.0= 2.0= 3.0= 3.5= 3.6= 4.0= 5.0= 5.0.3`	No fix yet

Description

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

References

securitytracker.com/id
cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml · Vendor Advisory
kb.cert.org/vuls/id/127545 · US Government Resource
osvdb.org/35524
securityfocus.com/bid/23647
vupen.com/english/advisories/2007/1545
exchange.xforce.ibmcloud.com/vulnerabilities/33861

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free