CVE-2002-0881 Hardcoded credentials in n/a

What is CVE-2002-0881?

CVE-2002-0881 is a low-severity vulnerability in n/a, published on 31 Aug 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.

Which versions are affected by CVE-2002-0881?

It affects 2 products.

Products include Cisco Skinny Client Control Protocol Software, Cisco Voip Phone Cp-7940.

How do I fix CVE-2002-0881?

No fix has been published for CVE-2002-0881 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-0881 being exploited?

There is no known exploitation of CVE-2002-0881 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2012-5445 Memory corruption in n/a Medium 6.8
• CVE-2011-1602 Privilege escalation in n/a Medium 6.6
• CVE-2011-1603 Privilege escalation in n/a Medium 6.6
• CVE-2002-0882 Integer overflow in n/a Medium 6.4
• CVE-2018-15434 Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-336r-933p-8mq5.