CVEvulnerability

CVE-2002-0628

7.5 HIGH Published 2003-01-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-01-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-307

Description

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.

Affected configurations

• polycom viewstation 128 6.5.1 • polycom viewstation 128 7.2 • polycom viewstation 512 6.5.1 • polycom viewstation 512 7.2 • polycom viewstation dcp 6.5.1 • polycom viewstation dcp 7.2 • polycom viewstation fx vs4000 4.1.5 • polycom viewstation h.323 6.5.1 • polycom viewstation h.323 7.2 • polycom viewstation mp 6.5.1 • polycom viewstation mp 7.2 • polycom viewstation sp 384 6.5.1 • polycom viewstation sp 384 7.2 • polycom viewstation v.35 6.5.1 • polycom viewstation v.35 7.2

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

Referenced by CWE · observed example (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References