CVE-2010-2467
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.
| Software | From | Fixed in |
|---|---|---|
| s2sys / netbox | 3.3 | 3.3.x |
| s2sys / netbox | 2.5 | 2.5.x |
| s2sys / netbox | 4.0 | 4.0.x |
| linearcorp / emerge_50 | - | - |
| linearcorp / emerge_5000 | - | - |
| sonitrol / eaccess | - | - |
- http://blip.tv/file/3414004
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59828
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime