CVE-1999-0508

CVE-1999-0508 describes a critical vulnerability where network devices like routers or firewalls are configured with default, null, blank, or missing passwords for user accounts. This significantly increases the attack surface, as it allows unauthenticated local attackers to gain unauthorized access to the device, potentially compromising confidentiality, integrity, and availability. While not actively exploited in the wild according to available data, Metasploit modules exist for SNMP enumeration and community string scanning, indicating readily available tools for reconnaissance and potential exploitation. Despite its age, the FAUCET Risk Score of 96/100 highlights its continued high risk, though it lacks significant community discussion or media coverage.