CVE-1999-1524
MediumExploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
FlowPoint DSL router firmware versions prior to 3.0.8 allow a remote attacker to exploit a password recovery feature from the network, enabling brute force password guessing.
Risk Assessment
An attacker could gain access to the router, potentially leading to loss of data confidentiality and control over the device within the network.
Recommendation
It is recommended to update the FlowPoint DSL router firmware to version 3.0.8 or later to prevent remote exploitation of the password recovery feature.
Original NVD description (English source)
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.