Vulnerability in Polycom Viewstation 128
CVE-2002-0626
Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.018 (77.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- Polycom Viewstation 128 — versions 6.5.1, 7.2
- Polycom Viewstation 512 — versions 6.5.1, 7.2
- Polycom Viewstation Dcp — versions 6.5.1, 7.2
- Polycom Viewstation Fx Vs4000 — versions 4.1.5
- Polycom Viewstation H.323 — versions 6.5.1, 7.2
- Polycom Viewstation Mp — versions 6.5.1, 7.2
- Polycom Viewstation Sp 384 — versions 6.5.1, 7.2
- Polycom Viewstation V.35 — versions 6.5.1, 7.2
References
- www.iss.net/security_center/static/9347.php (vdb-entry, Vendor Advisory)
- bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp (third-party-advisory)
- www.polycom.com/common/pw_item_show_doc/0,,1444,00.pdf
- www.ciac.org/ciac/bulletins/m-123.shtml (Patch, government-resource, Vendor Advisory, third-party-advisory)
- www.securityfocus.com/bid/5631 (vdb-entry, Vendor Advisory)