CVE-2002-0628

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-01-07 · updated 2026-06-16
Weakness: CWE-307

Description

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.

Affected products

Polycom Viewstation 128: 6.5.1, 7.2
Polycom Viewstation 512: 6.5.1, 7.2
Polycom Viewstation Dcp: 6.5.1, 7.2
Polycom Viewstation Fx Vs4000: 4.1.5
Polycom Viewstation H.323: 6.5.1, 7.2
Polycom Viewstation Mp: 6.5.1, 7.2
Polycom Viewstation Sp 384: 6.5.1, 7.2
Polycom Viewstation V.35: 6.5.1, 7.2

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089
http://www.ciac.org/ciac/bulletins/m-123.shtml
http://www.iss.net/security_center/static/9349.php
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
http://www.securityfocus.com/bid/5635
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089
http://www.ciac.org/ciac/bulletins/m-123.shtml
http://www.iss.net/security_center/static/9349.php
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
http://www.securityfocus.com/bid/5635
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241

Get alerted when CVE-2002-0628 or the next vulnerability affects your stack