CVE-2002-2037

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provisioning Tool (VSPT) runs on default installations of Solaris 2.6 with unnecessary services and without the latest security patches, which allows attackers to exploit known vulnerabilities.

Affected products

Cisco Bams: all versions
Cisco Pgw 2200: through 9.1
Cisco Sc2200: through 7.4
Cisco Vsc3000: through 9.1
Cisco Vspt: all versions

References

http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml
http://www.iss.net/security_center/static/7912.php
http://www.securityfocus.com/bid/3897
http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml
http://www.iss.net/security_center/static/7912.php
http://www.securityfocus.com/bid/3897

Get alerted when CVE-2002-2037 or the next vulnerability affects your stack