CVE-2002-1629

CVE-2002-1629 describes a critical vulnerability in several Multi-Tech ProxyServer products, including MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200. These devices were shipped with a default null password, allowing unauthenticated remote attackers to gain full administrative control via Telnet or HTTP. This vulnerability carries a CVSS score of 10.0, indicating maximum severity with no authentication required, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, readily available exploit code, or significant community discussion, the fundamental nature of the flaw makes it a severe risk for any unpatched systems.