Home  >  CVE-2002-1629
CVE Details for CVE: CVE-2002-1629
Summary
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2002 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:h:multi-tech:proxyserver:mtpsr1:100:*:*:*:*:*:*
    cpe:2.3:h:multi-tech:proxyserver:mtpsr1:100:*:*:*:*:*:*
  • cpe:2.3:h:multi-tech:proxyserver:mtpsr1:120:*:*:*:*:*:*
    cpe:2.3:h:multi-tech:proxyserver:mtpsr1:120:*:*:*:*:*:*
  • cpe:2.3:h:multi-tech:proxyserver:mtpsr1:202st:*:*:*:*:*:*
    cpe:2.3:h:multi-tech:proxyserver:mtpsr1:202st:*:*:*:*:*:*
  • cpe:2.3:h:multi-tech:proxyserver:mtpsr2:201:*:*:*:*:*:*
    cpe:2.3:h:multi-tech:proxyserver:mtpsr2:201:*:*:*:*:*:*
  • cpe:2.3:h:multi-tech:proxyserver:mtpsr3:200:*:*:*:*:*:*
    cpe:2.3:h:multi-tech:proxyserver:mtpsr3:200:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 7203
bugtraq 20021210 MTPSR1-120 Firewall Proxy configuration software
cert-vn VU#495705
xf proxyserver-mtpsr1120-telnet-access(10845)