CVE-2002-1629 Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet o...
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| multi-tech proxyserver | = mtpsr1-100 | No fix listed |
| multi-tech proxyserver | = mtpsr1-120 | No fix listed |
| multi-tech proxyserver | = mtpsr1-202st | No fix listed |
| multi-tech proxyserver | = mtpsr2-201 | No fix listed |
| multi-tech proxyserver | = mtpsr3-200 | No fix listed |
References
- 20021210 MTPSR1-120 Firewall Proxy configuration software mailing-list patch
- VU#495705 patch third-party-advisory us-government-resource
- 7203 patch vdb-entry
- proxyserver-mtpsr1120-telnet-access(10845) vdb-entry