CVE-2002-0540: High severity Nortel Cvx 1800 Multi-service Access Switch vulnerability
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0540?
CVE-2002-0540 is classified as a critical vulnerability due to its ability to expose sensitive information and allow unauthorized configuration changes.
How do I fix CVE-2002-0540?
To fix CVE-2002-0540, change the default "public" community string to a custom, secure value to prevent unauthorized access.
What systems are affected by CVE-2002-0540?
CVE-2002-0540 affects Nortel CVX 1800 Multi-service Access Switch versions 3.6.3-patch24, 3.6.3-patch25, and 3.6.3-patch5.
Can CVE-2002-0540 be exploited remotely?
Yes, CVE-2002-0540 can be exploited remotely, allowing attackers to read sensitive information and modify device configurations.
Is there a workaround for CVE-2002-0540 before applying the fix?
A temporary workaround for CVE-2002-0540 is to restrict access to the device by IP address to limit exposure while implementing the fix.