Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Lucent routers and DSLTerminator may reveal network details

CVE-2002-2148 · published 23 years ago
Summary

Older Lucent Ascend MAX, Ascend Pipeline routers and DSLTerminator devices can be tricked into sending back their host name, MAC address and IP address when they receive a special UDP packet. This exposure can help an attacker map your internal network. Update the firmware to a version that fixes the issue or replace the equipment with a secured model.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
lucent ascend_max_router 2.0
3.0
4.0
5.0
5.0_ap48
cpe:2.3:h:lucent:ascend_max_router:2.0:*:*:*:*:*:*:*
lucent ascend_pipeline_router 1.0
2.0
3.0
4.0
5.0
6.0
6.0.2
cpe:2.3:h:lucent:ascend_pipeline_router:1.0:*:*:*:*:*:*:*
lucent dslterminator All versions
cpe:2.3:h:lucent:dslterminator:*:*:*:*:*:*:*:*
Original advisory text
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and...
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published31 Dec 2002
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2002-2148 · NVD
Track software like this
Free during beta