CVE-2001-0448 Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS devi...

MediumCVSS 5.0 EPSS 1.3%

Published: 2001-05-24 07:00
Updated: 2026-06-17 00:54
Exploit status: No public exploit known

Description

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.

Affected products

Product	Affected versions	Fixed in
software602 602pro lan suite	<= 2000a_1.0.34	No fix listed

References

20010326 602Pro Lansuite Denial Of Service 1.0.34 mailing-list vendor-advisory

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.27% (percentile 70.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.