CVE-2004-1694: Symantec On Command Ccm

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.

Affected products

• Symantec On Command Ccm: version 5.0 only; version 5.1 only; version 5.2 only; version 5.3 only; version 5.4 only
• Symantec On Icommand: version 3.0 only

Published 2004-09-21. Last modified 2026-06-16.