PT-2005-4470 · Senao+1 · Senao Si-680H Wireless Voip Phone+1

Published 2005-11-21 · Updated 2011-03-08 · CVE-2005-3715

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Senao SI-680H Wireless VoIP Phone Firmware version 0.03.0839

Description The issue allows attackers to access the phone OS without authentication by exploiting the VxWorks debugger UDP port 17185. This can lead to obtaining sensitive information and causing a denial of service.

Recommendations For Senao SI-680H Wireless VoIP Phone Firmware version 0.03.0839, consider disabling access to the VxWorks debugger UDP port 17185 until a patch is available. Restrict access to the phone OS to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3715

Affected Products

Senao Si-680H Wireless Voip Phone

Vxworks

References · 5

• http://secunia.com/advisories/17606 · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3715 · Security Note
• http://securityfocus.com/bid/15475 · Note
• http://vupen.com/english/advisories/2005/2474 · Note