PT-1998-1175 · Modem · Modem

Publicado 1998-09-27 · Atualizado 2017-12-19 · CVE-1999-1228

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Various modems (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary modem commands, such as ATH and ATH0, by including a +++ sequence in various types of packets or messages, including ICMP packets, e-mail messages, and IRC commands. This is possible when modems do not implement a guard time or are configured with a guard time of 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1228

Produtos afetados

Modem

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/3320 · Nota
• http://marc.info/?l=bugtraq&m=90695973308453&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1228 · Nota de Segurança
• http://macintouch.com/modemsecurity.html · Aviso do Fabricante