« Volver al listado

CVE-1999-1228

Estado: ModificadaAlta (7.5)—

Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Diamond — SupraLogicode — QuicktelUS Robotics — US Robotics

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-1999-1228",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "1998-09-27T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=90695973308453&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.macintouch.com/modemsecurity.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/3320",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=90695973308453&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.macintouch.com/modemsecurity.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/3320",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a \"+++\" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others."
    }
  ],
  "lastModified": "2026-06-16T21:49:59.507",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:logicode:quicktel:28.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B177A271-09B3-48BC-B5D1-E1E17427813D"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:diamond:supra:33.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03638F27-02F0-4438-83B2-3D489090F35D"
            },
            {
              "criteria": "cpe:2.3:h:diamond:supra:v.90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CA4A31C-2DA6-4E0D-AA9C-73FB707ABCAE"
            },
            {
              "criteria": "cpe:2.3:h:us_robotics:us_robotics:33.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D89043A-7602-452F-BF33-2A8E85D6BF9A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}