vulnwire
9.8crit

CVE-2001-13391 exploit

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it ea…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
7.5%
percentile 95%
Public exploits
1
Exploit-DB

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.

Exploit prediction (EPSS)

7.49% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-20881 Beck IPC GmbH IPC@CHIP - TelnetD Login Account Brute Force · remote · 2001-05-24

CVSS scores

Assigned byVersionScoreVector
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-307 Improper Restriction of Excessive Authentication Attempts

References

  • kb.cert.org /vuls/id/198979 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/186418 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/2771 · vdb-entry, x_refsource_BID, x_transferred
  • cert.uni-stuttgart.de /archive/bugtraq/2001/06/msg00010.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/6605.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.