PT-2005-4477 · Hitachi · Hitachi Ip5000 Voip Wifi Phone

Shawn Merdinger · Published 2005-11-21 · Updated 2016-10-18 · CVE-2005-3722

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitachi IP5000 VOIP WIFI Phone version 1.5.6

Description The issue allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials. This is related to the SNMP v1/v2c daemon.

Recommendations For version 1.5.6, consider restricting access to the SNMP service until a patch is available. As a temporary workaround, limit the use of SNMP v1/v2c to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3722

Affected Products

Hitachi Ip5000 Voip Wifi Phone

References · 4

• http://secunia.com/advisories/17628 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3722 · Security Note
• http://hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf · Note
• http://marc.info/?l=full-disclosure&m=113217425618951&w=2 · Note