Unscored severity · published Dec 31, 2002
CVE-2002-2148
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Ascend Max Router · Lucent
2.0; 3.0; 4.0; 5.0; 5.0_ap48 · source: NVD
AP
Ascend Pipeline Router · Lucent
1.0; 2.0; 3.0; 4.0; 5.0; 6.0; +1 more · source: NVD
DS
Dslterminator · Lucent
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2148
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2148
online.securityfocus.com
http://online.securityfocus.com/archive/1/284650
www.iss.net
http://www.iss.net/security_center/static/9704.php
www.securityfocus.com
http://www.securityfocus.com/bid/5335
More from Ascend Max Router
–
CVE-1999-0060
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool