PT-2001-1613 · Lightwave · Lightwave Consoleserver 3200

Published 2001-05-24 · Updated 2024-02-09 · CVE-2001-0395

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lightwave ConsoleServer 3200

Description The issue allows remote attackers to conduct brute force password guessing because the system does not disconnect users after unsuccessful login attempts.

Recommendations For Lightwave ConsoleServer 3200, consider implementing a mechanism to disconnect or lock out users after a specified number of unsuccessful login attempts to mitigate the risk of brute force password guessing.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2001-0395

Affected Products

Lightwave Consoleserver 3200

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0395 · Security Note
• http://securityfocus.com/bid/2578 · Vendor Advisory
• https://t.me/cvenotify/70754 · Telegram Post