CVE-2021-25309

CVE-2021-25309 describes a critical vulnerability in the Gigaset DX600A v41.00-175 device, where the telnet administrator service on port 650 lacks lockout or throttling mechanisms. This, combined with a weak 4-digit password policy, allows unauthenticated remote attackers to easily brute-force credentials and gain full administrative access. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a high risk of complete compromise (confidentiality, integrity, and availability). While there is no evidence of active exploitation, exploit code, or significant community discussion, the ease of exploitation makes it a serious concern for affected organizations.