CVE-1999-1389: 3com Total Control Netserver Card

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.

Affected products

  • 3com Total Control Netserver Card: up to and including 3.7.24

Published 1998-05-11. Last modified 2026-06-16.