CVE-2002-1946 describes a weak encryption vulnerability in Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. When the "Save Password" option is enabled, the software stores user passwords in the Windows Registry using a simple one-to-one mapping encryption scheme. This allows local attackers to easily retrieve and decrypt saved passwords. The vulnerability has a CVSS v3.1 score of 5.5 (Medium), indicating that it can be exploited locally with low attack complexity, leading to high confidentiality impact without affecting integrity or availability. While the EPSS score is very low, suggesting a minimal likelihood of exploitation, the FAUCET Risk Score is 24/100. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The CVE has received no community discussion or media coverage, aligning with the typical lack of attention for a significant percentage of older vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.000CPE matchmatch criteria | cpe:2.3:a:tata:integrated_dialer:1.2.000:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.