PT-2007-3836 · Alcatel Lucent · Ip-Touch Telephone+1

Published 2007-06-07 · Updated 2018-10-16 · CVE-2007-2512

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise versions 7.0 and later

Description The issue allows attackers to gain access to the voice VLAN via daisy-chained systems because the mini switch is enabled by default.

Recommendations For OmniPCX Enterprise versions 7.0 and later, consider disabling the mini switch to prevent unauthorized access to the voice VLAN.

Fix

Related Identifiers

CVE-2007-2512

Affected Products

Ip-Touch Telephone

Omnipcx Enterprise

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-2512 · Security Note
• http://cert.uni-stuttgart.de/advisories/al-ip-touch-vlan-filtering.php · Vendor Advisory
• http://securityfocus.com/archive/1/470742/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34760 · Note
• http://osvdb.org/38526 · Note
• http://securityfocus.com/bid/24360 · Note