CVE-2002-0453 json
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it…
published 2002-06-11 24 y ago modified 2026-06-16 4 mo ago also EUVD-2002-0450
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known
Summary
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
Patch / fix
- securityfocus.com/bid/4288 advisory
- iss.net/security_center/static/8461.php advisory
Exploit prediction
1.77% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- securityfocus.com http://www.securityfocus.com/bid/4288 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/4288
vdb-entry, exploit, patch, vendor-advisory
-
iss.net
/security_center/static/8461.php
vdb-entry, patch, vendor-advisory
-
securityfocus.com
/archive/1/262066
mailing-list, vendor-advisory
Sources
- CVE List CVE-2002-0453
- NVD CVE-2002-0453
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.