CVE-2002-0626

CVE-2002-0626 describes a critical vulnerability in Polycom ViewStation devices prior to version 7.2.4, where the administrator account is configured with a default null password. This allows any unauthenticated attacker to gain full administrative control over affected ViewStation models, including the 128, 512, DCP, FX VS4000, H.323, MP, SP 384, and V.35 series. The vulnerability carries a CVSS score of 10.0, indicating maximum severity due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. An attacker can exploit this flaw remotely without any authentication. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, suggesting a lack of widespread attention or exploitation in the wild.