Description
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
References
- 15757 third-party-advisory
- http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf