vulnwire
6.4med

CVE-2002-2380

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undo…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.9%
percentile 96%
Public exploits
0
none known

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.

Exploit prediction (EPSS)

10.94% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.4AV:N/AC:L/Au:N/C:P/I:P/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • securityfocus.com /bid/6064 · vdb-entry, x_refsource_BID, x_transferred
  • cert.uni-stuttgart.de /archive/bugtraq/2002/10/msg00416.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/10498.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.