1. CVE-Search
  2. CVE-2002-0628
ID CVE-2002-0628
Summary The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
References
Vulnerable Configurations
  • cpe:2.3:h:polycom:viewstation_512:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_512:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_h.323:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_h.323:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_sp_384:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_sp_384:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_mp:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_mp:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_h.323:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_h.323:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_128:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_128:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_dcp:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_dcp:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_v.35:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_v.35:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_512:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_512:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_sp_384:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_sp_384:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_v.35:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_v.35:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_fx_vs4000:4.1.5:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_fx_vs4000:4.1.5:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_128:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_128:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_dcp:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_dcp:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:h:polycom:viewstation_mp:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:h:polycom:viewstation_mp:6.5.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 09-02-2024 - 03:14)
Impact:
Exploitability:
CWE CWE-307
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 5635
ciac M-123
confirm http://www.polycom.com/common/pw_item_show_doc/0,,1444,00.pdf
iss 20020904 Multiple Remote Vulnerabilities in Polycom Videoconferencing Products
xf
  • viewstation-telnet-login-dos(9349)
  • viewstation-telnet-login-info-disclosure(44241)
Last major update 09-02-2024 - 03:14
Published 07-01-2003 - 05:00
Last modified 09-02-2024 - 03:14
Back to Top