CVEvulnerability

CVE-2002-0626

10.0 HIGH Published 2003-01-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-01-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.

Affected configurations

• polycom viewstation 128 6.5.1 • polycom viewstation 128 7.2 • polycom viewstation 512 6.5.1 • polycom viewstation 512 7.2 • polycom viewstation dcp 6.5.1 • polycom viewstation dcp 7.2 • polycom viewstation fx vs4000 4.1.5 • polycom viewstation h.323 6.5.1 • polycom viewstation h.323 7.2 • polycom viewstation mp 6.5.1 • polycom viewstation mp 7.2 • polycom viewstation sp 384 6.5.1 • polycom viewstation sp 384 7.2 • polycom viewstation v.35 6.5.1 • polycom viewstation v.35 7.2

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089 bvlive01.iss.net
http://www.ciac.org/ciac/bulletins/m-123.shtml Patch, Vendor Advisory
http://www.iss.net/security_center/static/9347.php Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf www.polycom.com
http://www.securityfocus.com/bid/5631 Vendor Advisory
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089 bvlive01.iss.net
http://www.ciac.org/ciac/bulletins/m-123.shtml Patch, Vendor Advisory
http://www.iss.net/security_center/static/9347.php Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf www.polycom.com
http://www.securityfocus.com/bid/5631 Vendor Advisory