PT-2021-16510 · Gigaset · Gigaset Dx600A

Published 2021-03-02 · Updated 2022-04-26 · CVE-2021-25309

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Gigaset DX600A version 41.00-175

Description: The issue concerns the telnet administrator service on Gigaset DX600A devices, which lacks lockout or throttling functionality. This, combined with a weak password policy that only allows 4-digit passwords, makes it possible for remote attackers to gain administrative access through brute-force attacks.

Recommendations: For version 41.00-175, consider disabling the telnet administrator service on port 650 until a more secure authentication mechanism is implemented, and enforce a stronger password policy to prevent brute-force attacks.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-521

Related Identifiers

CVE-2021-25309

Affected Products

Gigaset Dx600A

References · 3

• https://osv.dev/vulnerability/CVE-2021-25309 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25309 · Security Note
• https://research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306 · Note