CVE Details for CVE: CVE-2002-1229
Summary
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
| Timestamps | |
|---|---|
| Last major update | 18-10-2016 - 02:24 |
| Published | 28-10-2002 - 05:00 |
| Last modified | 18-10-2016 - 02:24 |
References
Vulnerable Configurations
-
cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*
cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*
-
cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*
cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*
-
cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*
cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*
-
cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*
cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*
-
cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*
cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*
CWE
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | PARTIAL | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 5965 |
| bugtraq | 20021015 Undocumented account vulnerability in Avaya P550R/P580/P880/P882 |
| cert-vn | VU#482241 |
| confirm | http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented |
| xf | avaya-cajun-default-passwords(10374) |