CVE Catalog

CVE-1999-1151

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.26%

66th percentile - higher than 66% of all known CVEs

Summary

The Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, allowing remote attackers to cause a denial of service.

Risk Assessment

Attackers can exploit this vulnerability to block access to the integrator, potentially leading to service interruptions for users.

Recommendation

It is recommended to implement a session timeout mechanism after a specified period of inactivity to minimize the risk of denial of service.

Original NVD description (English source)

Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS