PT-2005-4476 · Hitachi · Hitachi Ip5000 Voip Wifi Phone

Shawn Merdinger · Published 2005-11-21 · Updated 2016-10-18 · CVE-2005-3721

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hitachi IP5000 VOIP WIFI Phone version 1.5.6

Description The default configuration of the HTTP server does not require authentication for sensitive configuration pages, allowing remote attackers to modify configuration.

Recommendations For Hitachi IP5000 VOIP WIFI Phone version 1.5.6, consider configuring the HTTP server to require authentication for sensitive configuration pages to prevent unauthorized modifications.

Fix

Related Identifiers

CVE-2005-3721

Affected Products

Hitachi Ip5000 Voip Wifi Phone

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-3721 · Security Note
• http://secunia.com/advisories/17628 · Vendor Advisory
• http://hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf · Note
• http://marc.info/?l=full-disclosure&m=113217425618951&w=2 · Note