CVE-2001-1291

Опубликовано: 12 июл. 2001

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.

Ссылки

http://www.securityfocus.com/archive/1/196957
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3034
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6855
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/196957
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3034
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6855
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:3com:superstack_ii_ps_hub_40_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:3com:superstack_ii_ps_hub_40:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09888

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-307

Связанные уязвимости

GHSA-9qq6-6qwx-6wrm