Avaya switches contains multiple undocumented accounts allowing full administrative access to the device

Overview

Multiple Avaya switches do not adequately protect privileged access.

Description

Avaya’s P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet.

---

Impact

A remote attacker can gain privileged access to the switch. As a result, an attacker could read and/or write switch data.

---

Solution

Upgrade the switch firmware.

---

Workaround

If you cannot upgrade the switch firmware as Avaya suggests, you may wish to disable the “manuf” & “diag” accounts on the switch.

---

Vendor Information

482241

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Avaya __ Affected

Updated: October 18, 2002

Status

Affected

Vendor Statement

http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23482241 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented
• <http://online.securityfocus.com/archive/1/295256/2002-10-15/2002-10-21/0&gt;
• <http://online.securityfocus.com/archive/1/295567/2002-10-15/2002-10-21/0&gt;
• <http://online.securityfocus.com/archive/1/295890/2002-10-15/2002-10-21/0&gt;

Acknowledgements

Thanks to Jacek Lipkowski for reporting this vulnerability.

This document was written by Ian A Finlay.

Other Information

CVE IDs:	CVE-2002-1229
Severity Metric:	25.65 Date Public: