CVE-2002-2148: Medium severity Lucent Ascend MAX Router vulnerability
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2148?
CVE-2002-2148 is considered a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2002-2148?
To fix CVE-2002-2148, update your Lucent Ascend MAX Router or Ascend Pipeline Router to the latest firmware version.
Which devices are affected by CVE-2002-2148?
CVE-2002-2148 affects Lucent Ascend MAX Router versions 5.0 and earlier, and Lucent Ascend Pipeline Router versions 6.0.2 and earlier.
What type of information can be disclosed through CVE-2002-2148?
CVE-2002-2148 allows remote attackers to obtain sensitive information such as hostname, MAC address, and IP address.
Is CVE-2002-2148 a local or remote vulnerability?
CVE-2002-2148 is a remote vulnerability that can be exploited without physical access to the device.