CVE-2002-2148

CVE-2002-2148 describes an information disclosure vulnerability affecting Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier, and Lucent DSLTerminator devices. Remote attackers can obtain sensitive information like hostname, MAC, and IP addresses by sending a discard (UDP port 9) packet, which causes the device to leak this data in its response. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low complexity, and a partial impact on confidentiality. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, though it has garnered significant community discussion with 10 mentions.