PT-2002-2657 · Utstarcom · Utstarcom Bas 1000

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1936

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UTStarcom BAS 1000 version 3.1.10

Description The issue allows remote attackers to gain access due to the presence of default or back door accounts and passwords. Specifically, the affected accounts and passwords are: (1) field account with a password of *field, (2) guru account with a password of *3noguru, (3) snmp account with a password of snmp, or (4) dbase account with a password of dbase.

Recommendations For UTStarcom BAS 1000 version 3.1.10, consider changing the default passwords for the field, guru, snmp, and dbase accounts to prevent unauthorized access. As a temporary workaround, restrict access to these accounts until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2002-1936

Produtos afetados

Utstarcom Bas 1000

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1936 · Nota de Segurança
• http://online.securityfocus.com/archive/1/288866 · Nota
• http://securityfocus.com/bid/5564 · Nota
• http://iss.net/security_center/static/9951.php · Nota