Vulnerability CVE-2005-3723

Vulnerability CVE-2005-3723

Published: 2005-11-21 Modified: 2012-02-12

Description:

Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Hitachi -> Ip5000 voip wifi phone

References:

http://secunia.com/advisories/17628

http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf

http://marc.theaimsgroup.com/?l=full-disclosure&m=113217425618951&w=2

Copyright 2024, cxsecurity.com