Description
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command.
References
- 335 third-party-advisory
- 16211 vdb-entry
- 1015471 vdb-entry
- ADV-2006-0154 vdb-entry
- 20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS) vendor-advisory
- cisco-csmars-default-password(24065) vdb-entry
- 18424 third-party-advisory
- 20060112 Cisco, haven't we learned anything? (technician reset) mailing-list
- 22346 vdb-entry