PT-2003-1135 · Polycom · Polycom Viewstation

CVE-2002-0628 · Publicado 2003-01-03 · Atualizado 2024-02-09

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Polycom ViewStation versions prior to 7.2.4

Description The issue allows remote attackers to guess usernames and passwords via a brute force attack because the Telnet service does not restrict the number of failed login attempts.

Recommendations For versions prior to 7.2.4, update to version 7.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Telnet service to minimize the risk of exploitation.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2002-0628

Produtos afetados

Polycom Viewstation

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-0628 · Nota de Segurança
• http://iss.net/security_center/static/9349.php · Aviso do Fabricante
• https://t.me/cvenotify/70759 · Publicação no Telegram
• http://polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf · Nota
• http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44241 · Nota
• http://securityfocus.com/bid/5635 · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/m-123.shtml · Aviso do Fabricante