PatchTheCVECVE-2002-1936: UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote att
CVE-2002-1936 is a high-severity flaw (CVSS 7.5) affecting bas 1000. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account with a password of "*3noguru", (3) snmp account with a password of "snmp", or (4) dbase account with a password of "dbase".
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 1.5% (top 25%) |
| CISA exploited list | No |
| Published | 2002-12-31 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2002-1936?
bas 1000: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2002-1936 being exploited?
CVE-2002-1936 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2002-1936 affect?
CVE-2002-1936 affects bas 1000. Severity is high (CVSS 7.5). UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account with a password of "*3noguru", (3) snmp
How urgent is CVE-2002-1936?
Priority 45/100. High severity