PT-2005-4474 · Hitachi · Hitachi Ip5000 Voip Wifi Phone

Shawn Merdinger · Published 2005-11-21 · Updated 2016-10-18 · CVE-2005-3719

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitachi IP5000 VOIP WIFI Phone version 1.5.6

Description The issue concerns a hard-coded administrator password, which is set to 0000. This allows attackers who have physical access to the device to obtain sensitive information and modify the phone's configuration.

Recommendations For Hitachi IP5000 VOIP WIFI Phone version 1.5.6, consider changing the administrator password to a strong and unique value as soon as possible to prevent unauthorized access. As a temporary workaround, restrict physical access to the device until a more permanent solution is available.

Fix

Related Identifiers

CVE-2005-3719

Affected Products

Hitachi Ip5000 Voip Wifi Phone

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-3719 · Security Note
• http://secunia.com/advisories/17628 · Vendor Advisory
• http://hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf · Note
• http://marc.info/?l=full-disclosure&m=113217425618951&w=2 · Note