CVE-2004-1321

CVE-2004-1321 describes a critical vulnerability in the Asante FM2008 Managed Ethernet Switch, specifically firmware version 1.06, where configuration backups store usernames and passwords in cleartext. This flaw allows remote attackers to easily gain unauthorized access to the device. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.