CVE-2002-0540

CVE-2002-0540 describes a critical vulnerability in the Nortel CVX 1800 Multi-Service Access Switch, where a default "public" SNMP community string is enabled. This misconfiguration allows unauthenticated remote attackers to read sensitive information, including usernames and passwords, and to modify the device's configuration. With a CVSS score of 7.5, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.