CVE-2006-4312 json
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up t…
published 2006-08-23 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4300
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 25%
- public exploits
- 0
- none known
Summary
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.
Exploit prediction
0.32% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:L/AC:L/Au:S/C:C/I:C/A:C |
References
-
cisco.com
/warp/public/707/cisco-sa-20060823-firewall.shtml
vendor-advisory
-
vupen.com
/english/advisories/2006/3367
vdb-entry
-
securitytracker.com
/id?1016740
vdb-entry
-
securityfocus.com
/bid/19681
vdb-entry
-
osvdb.org
/28143
vdb-entry
-
securitytracker.com
/id?1016738
vdb-entry
-
securitytracker.com
/id?1016739
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/28540
vdb-entry
-
secunia.com
/advisories/21616
third-party-advisory
Sources
- CVE List CVE-2006-4312
- NVD CVE-2006-4312
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.