PT-2006-1378 · Clipcomm · Clipcomm Cp-100E Voip 802.11B Wireless Phone+1

Published 2006-01-19 · Updated 2017-07-20 · CVE-2006-0305

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone version 1.1.12 (051129) Clipcomm CP-100E VoIP 802.11b Wireless Phone version 1.1.60

Description The issue allows remote attackers to gain unauthorized access via the debug service on TCP port 60023.

Recommendations For Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone version 1.1.12 (051129), consider disabling the debug service on TCP port 60023 until a patch is available. For Clipcomm CP-100E VoIP 802.11b Wireless Phone version 1.1.60, consider disabling the debug service on TCP port 60023 until a patch is available.

Fix

Related Identifiers

CVE-2006-0305

Affected Products

Clipcomm Cp-100E Voip 802.11B Wireless Phone

Clipcomm Cpw-100E Voip 802.11B Wireless Handset Phone

References · 6

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041436.html · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041439.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0305 · Security Note
• http://secunia.com/advisories/18505 · Vendor Advisory
• http://securityfocus.com/bid/16289 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24144 · Note