Critical severity9.8NVD Advisory· Published Mar 2, 2021· Updated Jun 17, 2026

CVE-2021-25309

Description

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gigaset/DX600Adescription
Gigaset/DX600Allm-fuzzy
Range: v41.00-175
Gigaset/Dx600a Firmware
cpe:2.3:o:gigaset:dx600a_firmware:v41.00-175:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000