PT-2006-1446 · Advantage Century Telecommunication · Act P202S Ip Phone

Publicado 2006-01-22 · Atualizado 2017-07-20 · CVE-2006-0375

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Advantage Century Telecommunication (ACT) P202S IP Phone version 1.01.21

Description The issue concerns the use of a hardcoded Network Time Protocol (NTP) server, which could allow remote attackers to manipulate time information. This could lead to providing false time information, blocking access to time information, or conducting other attacks.

Recommendations For version 1.01.21, consider configuring an alternative NTP server to mitigate the risk of relying on a hardcoded server. As a temporary workaround, restrict access to the NTP service to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0375

Produtos afetados

Act P202S Ip Phone

Referências · 5

• http://secunia.com/advisories/18514 · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24149 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0375 · Nota de Segurança
• http://securityfocus.com/bid/16288 · Nota