CVE-1999-1524

FlowPoint DSL router firmware versions prior to 3.0.8 expose a network-accessible password recovery feature that is not confined to the serial console port, enabling a remote attacker to perform brute-force password guessing. The underlying issue is lack of access control on the password recovery...