What’s Vulnerable › Vulnerabilities

CVE-2001-1291

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-07-12 · updated 2026-06-16
• Weakness: CWE-307

Description

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.

Affected products

• 3Com Superstack Ii Ps Hub 40 Firmware: all versions

References

• http://www.securityfocus.com/archive/1/196957
• http://www.securityfocus.com/bid/3034
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6855
• http://www.securityfocus.com/archive/1/196957
• http://www.securityfocus.com/bid/3034
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6855

Get alerted when CVE-2001-1291 or the next vulnerability affects your stack