Back to CVE Browser

CVE-2002-1691

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0220%

EPSS Percentile18.49th

PublishedDec 31, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access.

Affected Platforms (CPE)

📦

Alcatel Lucent

Omnipcx

= 4400

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=101413767925869&w=2

🔗 http://www.securityfocus.com/bid/4127

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/8224

🔗 http://marc.info/?l=bugtraq&m=101413767925869&w=2

🔗 http://www.securityfocus.com/bid/4127

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/8224

Related Vulnerabilities

CVE-2008-133110.0

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and ...

CVE-2007-30109.8

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attack...

CVE-2007-53618.5

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an I...

CVE-2007-25127.5

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attack...