PT-2005-4470 · Senao+1 · Senao Si-680H Wireless Voip Phone+1

Publicado 2005-11-21 · Atualizado 2011-03-08 · CVE-2005-3715

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Senao SI-680H Wireless VoIP Phone Firmware version 0.03.0839

Description The issue allows attackers to access the phone OS without authentication by exploiting the VxWorks debugger UDP port 17185. This can lead to obtaining sensitive information and causing a denial of service.

Recommendations For Senao SI-680H Wireless VoIP Phone Firmware version 0.03.0839, consider disabling access to the VxWorks debugger UDP port 17185 until a patch is available. Restrict access to the phone OS to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3715

Produtos afetados

Senao Si-680H Wireless Voip Phone

Vxworks

Referências · 5

• http://securityfocus.com/bid/15475 · Nota
• http://secunia.com/advisories/17606 · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3715 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2474 · Nota