CVEvulnerability
CVE-2001-1339
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2001-05-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-307
Description
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
Affected configurations
• anybus ipc\@chip firmware
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
Referenced by CWE · observed example (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html Broken Link
- http://www.iss.net/security_center/static/6605.php Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/198979 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/186418 Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/2771 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html Broken Link
- http://www.iss.net/security_center/static/6605.php Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/198979 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/186418 Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/2771 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory