Unscored severity · published Jul 3, 2002
CVE-2002-0540
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration
–
CVSS
19.9%
EPSS
No
On KEV
Description
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C1
Cvx 1800 Multi-service Access Switch · Nortel
3.6.3; 3.6.3; 3.6.3 · source: NVD
Affected product
C1
Cvx 1800 Multi-service Access Switch
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0540
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0540
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.html
online.securityfocus.com
http://online.securityfocus.com/archive/1/267627
Patch
http://www.iss.net/security_center/static/8848.php
US Government Resource
http://www.kb.cert.org/vuls/id/403315
Exploit
http://www.securityfocus.com/bid/4507