CVE-2016-1307

NONE EPSS 62.6%

Published Feb 7, 201610y ago · Modified Jun 17, 20262w ago

Published Feb 7, 2016 10y ago

Last Modified Jun 17, 2026 2w ago

Description

The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085.

Threat Intelligence

EPSS Exploit Probability

62.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-255

CWE-287 Improper Authentication Authentication

Affected Products 3

Vendor	Product	Version	Range
zyxel	gs1900-10hp_firmware	*	<2.50\(aazi.0\)c0
zzinc	keymouse_firmware	3.08	any
zyxel	gs1900-10hp_firmware	*	<2.50\(aazi.0\)c0

References 3

tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-fducce

Vendor Advisory
securitytracker.com http://www.securitytracker.com/id/1034920
securitytracker.com http://www.securitytracker.com/id/1034921

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.