Vulnerabilities > CVE-2011-2077 - Configuration vulnerability in Inventivetec Mediacast

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
inventivetec
CWE-16

Summary

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session.

Vulnerable Configurations

Part Description Count
Application
Inventivetec
1

Common Weakness Enumeration (CWE)