Vulnerability in Polycom Viewstation 128
CVE-2002-0628
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Polycom Viewstation_128 — versions 6.5.1, 7.2
- Polycom Viewstation_512 — versions 6.5.1, 7.2
- Polycom Viewstation_dcp — versions 6.5.1, 7.2
- Polycom Viewstation_fx_vs4000 — versions 4.1.5
- Polycom Viewstation_h.323 — versions 6.5.1, 7.2
- Polycom Viewstation_mp — versions 6.5.1, 7.2
- Polycom Viewstation_sp_384 — versions 6.5.1, 7.2
- Polycom Viewstation_v.35 — versions 6.5.1, 7.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, Broken Link, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (x_refsource_ISS, Broken Link, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Product)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, government-resource, Broken Link, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
Frequently asked questions
- What is CVE-2002-0628?
- CVE-2002-0628 is a high-severity vulnerability in Polycom Viewstation 128, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.5/10. Published 2003-01-07.
- How severe is CVE-2002-0628?
- High severity. CVSS v3 base score is 7.5 out of 10.