UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of *field, (2) guru account with a password of *3noguru, (3) snmp account with a password of snmp, or (4) dbase account with a password of dbase.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bas_1000 | Utstarcom | 3.1.10 (including) | 3.1.10 (including) |