Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.
| Software | From | Fixed in |
|---|---|---|
| nortel / cvx_1800_multi-service_access_switch | 3.6.3-patch24 | 3.6.3-patch24.x |
| nortel / cvx_1800_multi-service_access_switch | 3.6.3-patch25 | 3.6.3-patch25.x |
| nortel / cvx_1800_multi-service_access_switch | 3.6.3-patch5 | 3.6.3-patch5.x |