← Zuruck zu CVEs
CVE-2001-1339
CRITICAL9.8
Beschreibung
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
CVE Details
CVSS v3.1 Bewertung9.8
SchweregradCRITICAL
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht5/24/2001
Zuletzt geandert4/3/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
anybus:ipc\@chipanybus:ipc\@chip_firmware
Schwachen (CWE)
CWE-307
Referenzen
http://www.iss.net/security_center/static/6605.php(cve@mitre.org)
http://www.kb.cert.org/vuls/id/198979(cve@mitre.org)
http://www.securityfocus.com/archive/1/186418(cve@mitre.org)
http://www.securityfocus.com/bid/2771(cve@mitre.org)
http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.iss.net/security_center/static/6605.php(af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/198979(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/186418(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/2771(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.