PT-2005-4477 · Hitachi · Hitachi Ip5000 Voip Wifi Phone

Shawn Merdinger · Publicado 2005-11-21 · Atualizado 2016-10-18 · CVE-2005-3722

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitachi IP5000 VOIP WIFI Phone version 1.5.6

Description The issue allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials. This is related to the SNMP v1/v2c daemon.

Recommendations For version 1.5.6, consider restricting access to the SNMP service until a patch is available. As a temporary workaround, limit the use of SNMP v1/v2c to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3722

Produtos afetados

Hitachi Ip5000 Voip Wifi Phone

Referências · 4

• http://hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf · Nota
• http://secunia.com/advisories/17628 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3722 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=113217425618951&w=2 · Nota