First published: Tue Dec 31 2002(Updated: )
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Lucent DSLTerminator | ||
Lucent Ascend Pipeline Router | =4.0 | |
Lucent Ascend Pipeline Router | =5.0 | |
Lucent Ascend Pipeline Router | =1.0 | |
Lucent Ascend MAX Router | =5.0_ap48 | |
Lucent Ascend MAX Router | =3.0 | |
Lucent Ascend Pipeline Router | =6.0 | |
Lucent Ascend Pipeline Router | =2.0 | |
Lucent Ascend Pipeline Router | =6.0.2 | |
Lucent Ascend Pipeline Router | =3.0 | |
Lucent Ascend MAX Router | =4.0 | |
Lucent Ascend MAX Router | =2.0 | |
Lucent Ascend MAX Router | =5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2148 is considered a medium severity vulnerability due to its potential to expose sensitive information.
To fix CVE-2002-2148, update your Lucent Ascend MAX Router or Ascend Pipeline Router to the latest firmware version.
CVE-2002-2148 affects Lucent Ascend MAX Router versions 5.0 and earlier, and Lucent Ascend Pipeline Router versions 6.0.2 and earlier.
CVE-2002-2148 allows remote attackers to obtain sensitive information such as hostname, MAC address, and IP address.
CVE-2002-2148 is a remote vulnerability that can be exploited without physical access to the device.