VulnerabilityModified

CVE-2002-0628

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.

HIGH 7.5EPSS 2.19%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 2.19% probability · 81th percentile
CISA KEV: Not listed
Weakness: CWE-307
Affected: polycom/viewstation 128 · polycom/viewstation 512 · polycom/viewstation dcp · polycom/viewstation fx vs4000 · polycom/viewstation h.323 · polycom/viewstation mp · polycom/viewstation sp 384 · polycom/viewstation v.35
Source: cve@mitre.org

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089Broken Link
http://www.ciac.org/ciac/bulletins/m-123.shtmlBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9349.phpBroken Link, Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdfProduct
http://www.securityfocus.com/bid/5635Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241Third Party Advisory, VDB Entry
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089Broken Link
http://www.ciac.org/ciac/bulletins/m-123.shtmlBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9349.phpBroken Link, Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdfProduct
http://www.securityfocus.com/bid/5635Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.