Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9445-66j5-fhvj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.

EPSS

Процентиль: 68%
0.00556
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269
CWE-307

Связанные уязвимости

CVSS3: 9.8
nvd
почти 5 лет назад

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.

EPSS

Процентиль: 68%
0.00556
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269
CWE-307