CVE Catalog
CVE-1999-1559
MediumExploitation Probability (EPSS)
Elevated risk1.67%
74th percentile - higher than 74% of all known CVEs
Summary
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
Risk Assessment
Attackers can lock out other users from accessing the switch, leading to network downtime and loss of control over the device.
Recommendation
It is recommended to upgrade Xylan OmniSwitch to version 3.2.6 or later to mitigate this vulnerability.
Original NVD description (English source)
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.