9.8crit
CVE-2001-12911 exploit
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect usern…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
8.9%
percentile 95%
Public exploits
1
Exploit-DB
Summary
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
Exploit prediction (EPSS)
8.90% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.
Exploits and detections
- EDB-21011 3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection · remote · 2001-07-12
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-307 Improper Restriction of Excessive Authentication Attempts
References
- exchange.xforce.ibmcloud.com /vulnerabilities/6855 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /archive/1/196957 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/3034 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2001-1291
- NVD: CVE-2001-1291
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.