Every CVESearch/Get API key

CVE-2002-0134

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the...

7.5 High

CVE-2002-0134 is a high vulnerability (CVSS 7.5) in Avirt Gateway Suite, published March 15, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. No source names a fixed version.

Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
3.51%EPSS, 89th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Exploit likelihood

3.51%Up 2.3 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used7.5

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Record
CVE-2002-0134
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Record
CVE-2002-0134
Updated
2026-11-02
EUVDEUVD-2002-0134No score

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Record
EUVD-2002-0134
Updated
2026-11-03
GitHub AdvisoriesGHSA-fhpg-7fp6-jw7cNo score

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the...

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Record
GHSA-fhpg-7fp6-jw7c
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open