cmty-http-default-account-Liebert-password-Liebert.xml

<?xml version="1.0" encoding="UTF-8"?>
<Vulnerability id="cmty-http-default-account-Liebert-password-Liebert" published="2018-03-26" added="2018-03-26" modified="2018-03-26" version="2.0">
  <name>Default HTTP account: Liebert password "<![CDATA[Liebert]]>"</name>
  <severity>8</severity>
  <cvss>(AV:N/AC:L/Au:S/C:P/I:C/A:P)</cvss>
  <Tags>
    <tag>Default Account</tag>
    <tag>HTTP</tag>
  </Tags>
  <AlternateIds>
  </AlternateIds>

  <Description>
    <p>The administrative Liebert account uses a password of &quot;<![CDATA[Liebert]]>&quot;.  This would allow
      anyone to log into the web application via HTTP and abuse the application. This account is most commonly associated with Emerson Network Power &#34;IntelliSlot Web Cards&#34; which may indicate that related power infrastructure may be impacted by a malicious actor.
    </p>
  </Description>
  <Solutions>
    <Solution id="cmty-HTTP-default-account-Liebert-password-Liebert" time="15m">
      <summary>Fix Default HTTP account: Liebert password: <![CDATA[Liebert]]></summary>
      <workaround>
        <p>
          Change the password to a strong non-default value.
        </p>
      </workaround>
    </Solution>
  </Solutions>
</Vulnerability>