PT-2007-3836 · Alcatel Lucent · Ip-Touch Telephone+1

Publicado 2007-06-07 · Atualizado 2018-10-16 · CVE-2007-2512

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise versions 7.0 and later

Description The issue allows attackers to gain access to the voice VLAN via daisy-chained systems because the mini switch is enabled by default.

Recommendations For OmniPCX Enterprise versions 7.0 and later, consider disabling the mini switch to prevent unauthorized access to the voice VLAN.

Correção

Identificadores relacionados

CVE-2007-2512

Produtos afetados

Ip-Touch Telephone

Omnipcx Enterprise

Referências · 6

• http://securityfocus.com/archive/1/470742/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34760 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2512 · Nota de Segurança
• http://cert.uni-stuttgart.de/advisories/al-ip-touch-vlan-filtering.php · Aviso do Fabricante
• http://osvdb.org/38526 · Nota
• http://securityfocus.com/bid/24360 · Nota