APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ap9606 | Apc | * | 3.0 (including) |
References
- ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html
- http://www.securityfocus.com/bid/2430
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6199
- ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html
- http://www.securityfocus.com/bid/2430
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6199