PT-2001-1613 · Lightwave · Lightwave Consoleserver 3200

CVE-2001-0395 · Publicado 2001-05-24 · Atualizado 2024-02-09

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lightwave ConsoleServer 3200

Description The issue allows remote attackers to conduct brute force password guessing because the system does not disconnect users after unsuccessful login attempts.

Recommendations For Lightwave ConsoleServer 3200, consider implementing a mechanism to disconnect or lock out users after a specified number of unsuccessful login attempts to mitigate the risk of brute force password guessing.

Exploit

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2001-0395

Produtos afetados

Lightwave Consoleserver 3200

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0395 · Nota de Segurança
• http://securityfocus.com/bid/2578 · Aviso do Fabricante
• https://t.me/cvenotify/70754 · Publicação no Telegram