CVE-1999-1152

HighCVSS 7.5

Published: 03/06/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.57%

72th percentile - higher than 72% of all known CVEs

Summary

The Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, allowing remote attackers to guess usernames or passwords via a brute force attack.

Risk Assessment

The lack of disconnection after failed login attempts increases the risk of a successful attack, potentially leading to unauthorized access to the system.

Recommendation

It is recommended to configure the system to disconnect clients after a certain number of failed login attempts.

Other vulnerabilities in Compaq/Microcom 6000 Access Integrator

CVE-1999-1151Medium
The Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, allowing remote attackers to cause a denial of service.

Original NVD description (English source)

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.