CVE-1999-1228: Diamond Supra

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.

Affected products

• Diamond Supra: version 33.6 only; version v.90 only
• Logicode Quicktel: version 28.8 only
• Us Robotics Us Robotics: version 33.6 only

Published 1998-09-27. Last modified 2026-06-16.