vulnwire
7.5high

CVE-2002-1949

The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attac…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 68%
Public exploits
0
none known

The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.

Exploit prediction (EPSS)

1.20% probability of exploitation in the next 30 days, higher than 68% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-319 Cleartext Transmission of Sensitive Information

References

  • iss.net /security_center/static/10521.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/6092 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-10/0440.html · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.