CVE-2002-2037 The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provi...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provisioning Tool (VSPT) runs on default installations of Solaris 2.6 with unnecessary services and without the latest security patches, which allows attackers to exploit known vulnerabilities.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco bams | All versions | No fix listed |
| cisco pgw 2200 | <= 9.1 | No fix listed |
| cisco sc2200 | <= 7.4 | No fix listed |
| cisco vsc3000 | <= 9.1 | No fix listed |
| cisco vspt | All versions | No fix listed |
References
- 20020116 Hardening of Solaris OS for MGC patch vendor-advisory
- cisco-mgc-exposure(7912) patch vdb-entry
- 3897 patch vdb-entry