CVE-2002-1229

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=103470243012971&w=2
http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented
http://www.iss.net/security_center/static/10374.php	Vendor Advisory
http://www.kb.cert.org/vuls/id/482241	US Government Resource
http://www.securityfocus.com/bid/5965

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:avaya:cajun_p550:4.3.5:::::::*
	cpe:2.3:h:avaya:cajun_p550r:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p580:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p880:5.2.14:::::::*
	cpe:2.3:h:avaya:cajun_p882:5.2.14:::::::*

History

No history.

Information

Published : 2002-10-28 05:00

Updated : 2016-10-18 02:24

NVD link : CVE-2002-1229

Mitre link : CVE-2002-1229

CVE.ORG link : CVE-2002-1229

JSON object : View

Products Affected

avaya

cajun_p880
cajun_p550
cajun_p580
cajun_p550r
cajun_p882

CWE

NVD-CWE-Other

{"id": "CVE-2002-1229", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-10-28T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=103470243012971&w=2", "source": "cve@mitre.org"}, {"url": "http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10374.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/482241", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5965", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges."}], "lastModified": "2016-10-18T02:24:59.493", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BDA2B9E-02B8-4B83-9216-F5D221CB0999"}, {"criteria": "cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24821732-DF57-4ACB-83B6-300F29EDD6B6"}, {"criteria": "cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA66A0F3-6375-46E2-B578-6BE1D547A4D5"}, {"criteria": "cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EB5E767-25B0-42D7-9C0E-A224E0D1B621"}, {"criteria": "cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "473692FF-A731-4672-85AE-265C52835234"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}