CVE-2002-0628 The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute f...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom viewstation 128 | = 6.5.1 | No fix listed |
| polycom viewstation 128 | = 7.2 | No fix listed |
| polycom viewstation 512 | = 6.5.1 | No fix listed |
| polycom viewstation 512 | = 7.2 | No fix listed |
| polycom viewstation dcp | = 6.5.1 | No fix listed |
| polycom viewstation dcp | = 7.2 | No fix listed |
| polycom viewstation fx vs4000 | = 4.1.5 | No fix listed |
| polycom viewstation h.323 | = 6.5.1 | No fix listed |
| polycom viewstation h.323 | = 7.2 | No fix listed |
| polycom viewstation mp | = 6.5.1 | No fix listed |
| polycom viewstation mp | = 7.2 | No fix listed |
| polycom viewstation sp 384 | = 6.5.1 | No fix listed |
| polycom viewstation sp 384 | = 7.2 | No fix listed |
| polycom viewstation v.35 | = 6.5.1 | No fix listed |
| polycom viewstation v.35 | = 7.2 | No fix listed |
References
- 20020904 Multiple Remote Vulnerabilities in Polycom Videoconferencing Products broken-link third-party-advisory
- M-123 broken-link government-resource patch third-party-advisory vendor-advisory
- viewstation-telnet-login-dos(9349) broken-link vdb-entry vendor-advisory
- www.polycom.com product
- 5635 broken-link third-party-advisory vdb-entry vendor-advisory
- viewstation-telnet-login-info-disclosure(44241) third-party-advisory vdb-entry