Description
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/5635 ↗
- http://www.iss.net/security_center/static/9349.php ↗
- http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089 ↗
- http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44241 ↗
- http://www.ciac.org/ciac/bulletins/m-123.shtml ↗