Password Modification Vulnerability in Cisco Firewall Appliances

CVE-2006-4312

Summary

A significant issue in certain Cisco firewall appliances leads to unintentional changes in the EXEC password, local user passwords, and enable password. This flaw occurs under specific conditions and can result in administrators being inadvertently locked out of their devices. It potentially opens the door for attackers, allowing unauthorized access to the affected systems. This vulnerability affects various models within the Cisco PIX 500 and ASA 5500 series when operating on specific software versions, emphasizing the need for prompt updates and vigilance to maintain robust security postures.

References