CVE-2000-0955 Weak cryptography in n/a
Weak encryption in Cisco VCO/4K allows attackers with SNMP community access to crack stored credentials and gain elevated privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0955?
CVE-2000-0955 is a high-severity vulnerability in n/a, published on 29 Nov 2000. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
Which versions are affected by CVE-2000-0955?
It affects 1 product.
Products include Cisco Virtual Central Office 4000.
How do I fix CVE-2000-0955?
No fix has been published for CVE-2000-0955 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0955 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-0955 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-5h9h-c98x-gm88.