Unscored severity · published May 26, 2010
CVE-2010-2083
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via…
–
CVSS
8.5%
EPSS
No
On KEV
Description
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.5% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DG
Dynamics GP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2083
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2083
www.christopherkois.com
http://www.christopherkois.com/?p=448
More from Dynamics GP
8.8
CVE-2022-23274
Microsoft Dynamics GP Remote Code Execution Vulnerability
8.1
CVE-2022-23272
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
7.1
CVE-2022-23273
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
6.5
CVE-2022-23271
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
5.4
CVE-2022-23269
Microsoft Dynamics GP Spoofing Vulnerability