Vulnerability in Anybus Ipc\@chip

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.

EPSS: 0.075 (93.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
  • cve@mitre.org (Exploit, Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Broken Link)
  • cve@mitre.org (vdb-entry, Broken Link, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2001-1339?
CVE-2001-1339 is a critical-severity vulnerability in Anybus Ipc\@chip, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 9.8/10. Published 2001-05-24.
How severe is CVE-2001-1339?
Critical severity. CVSS v3 base score is 9.8 out of 10.