Vulnerabilities (CVE)

Filtered by vendor Gigaset Subscribe
Filtered by product Dx600a
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25309 1 Gigaset 2 Dx600a, Dx600a Firmware 2022-04-26 5.0 MEDIUM 9.8 CRITICAL
The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.