« Volver al listado

CVE-2002-1229

Estado: ModificadaAlta (7.5)—

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Avaya — Cajun P550Avaya — Cajun P550rAvaya — Cajun P580Avaya — Cajun P880Avaya — Cajun P882

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1229",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-10-28T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=103470243012971&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/10374.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/482241",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/5965",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=103470243012971&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/10374.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/482241",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/5965",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges."
    }
  ],
  "lastModified": "2026-06-16T21:58:58.400",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BDA2B9E-02B8-4B83-9216-F5D221CB0999"
            },
            {
              "criteria": "cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24821732-DF57-4ACB-83B6-300F29EDD6B6"
            },
            {
              "criteria": "cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA66A0F3-6375-46E2-B578-6BE1D547A4D5"
            },
            {
              "criteria": "cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EB5E767-25B0-42D7-9C0E-A224E0D1B621"
            },
            {
              "criteria": "cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "473692FF-A731-4672-85AE-265C52835234"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}