CVE-2021-25309: Gigaset DX600A Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks.

Affected products

• Gigaset DX600A Firmware: version v41.00-175 only

Published 2021-03-02. Last modified 2026-06-17.