First published: Mon Oct 21 2002(Updated: )
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Avaya Cajun P550r | =4.3.5 | |
Avaya Cajun P550r | =5.2.14 | |
Avaya Cajun P580 | =5.2.14 | |
Avaya Cajun P880 | =5.2.14 | |
Avaya Cajun P882 | =5.2.14 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1229 is classified as a high severity vulnerability due to the presence of undocumented accounts with default passwords.
To mitigate CVE-2002-1229, immediately disable the undocumented accounts 'manuf' and 'diag' and change any related default passwords.
CVE-2002-1229 affects Avaya Cajun switches P880, P882, P580, and P550R running versions 5.2.14 and earlier, as well as P550 running version 4.3.5.
Yes, exploiting CVE-2002-1229 can allow remote attackers to gain higher privileges and full access to affected systems.
No specific patch has been released for CVE-2002-1229, remediation relies on disabling the vulnerable accounts and changing passwords.