Search/CVE-2006-4312
● CVE

CVE-2006-4312

VendorciscoProductadaptive security appliance, pix firewall software, pix firewall 515, pix firewall 520, pix firewall 501, pix firewall 506, pix firewall 515e, pix firewall 525, pix firewall 535DiscoveredAug 23, 2006UpdatedApr 16, 2026

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

CVSS v3.1
—
EPSS
0.32%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Aug 23, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026