{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:01:42Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20020807-solaris-mgc","slug":"cisco-sa-20020807-solaris-mgc","vendor":"Cisco","title":"Hardening of Solaris OS for MGC","summary":"The Media Gateway Controller (MGC) product is installed on top of Solaris operating system. In the default installation Solaris has several know security vulnerabilities. In order to prevent them from being exploited customers must install updated packages CSCOh007 and CSCOh013. These packages contain the latest Solaris patches and additional hardening of the Solaris OS. These vulnerabilities have been exploited and PSIRT knows of a few cases where customer's systems running SC2200 have been compromised. We are investigating other products that are based on Solaris. There is no workaround. This advisory is available at the https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc.","severity":"NA","published_at":"2002-08-07T15:00:00Z","updated_at":"2002-08-07T15:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc/csaf/cisco-sa-20020807-solaris-mgc.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":4,"public_evidence_count":4,"kev_count":0,"highest_epss":0.01149},"cves":[{"id":"CVE-2002-2037","kev":false,"epss":{"score":0.01149,"percentile":0.63335,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco BAMS - Billing and Management Server","slug":"cisco-bams-billing-and-management-server","vendor":"Cisco"},"cve":{"id":"CVE-2002-2037"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:39Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco BAMS - Billing and Management Server","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01149,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-08-07T15:00:00Z","updated_at":"2002-08-07T15:00:00Z","advisory_updated_at":"2002-08-07T15:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc","row_display_order":1},{"product":{"name":"Cisco SC 2200 Signaling Controller","slug":"cisco-sc-2200-signaling-controller","vendor":"Cisco"},"cve":{"id":"CVE-2002-2037"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:39Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco SC 2200 Signaling Controller","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01149,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-08-07T15:00:00Z","updated_at":"2002-08-07T15:00:00Z","advisory_updated_at":"2002-08-07T15:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc","row_display_order":2},{"product":{"name":"Cisco Virtual Switch Controller VSC3000","slug":"cisco-virtual-switch-controller-vsc3000","vendor":"Cisco"},"cve":{"id":"CVE-2002-2037"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:39Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Virtual Switch Controller VSC3000","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01149,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-08-07T15:00:00Z","updated_at":"2002-08-07T15:00:00Z","advisory_updated_at":"2002-08-07T15:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc","row_display_order":3},{"product":{"name":"Cisco Voice Services Provisioning Tool (VSPT)","slug":"cisco-voice-services-provisioning-tool-vspt","vendor":"Cisco"},"cve":{"id":"CVE-2002-2037"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:37:39Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Voice Services Provisioning Tool (VSPT)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01149,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2002-08-07T15:00:00Z","updated_at":"2002-08-07T15:00:00Z","advisory_updated_at":"2002-08-07T15:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020807-solaris-mgc","row_display_order":4}]}