CVE-2007-0528

EPSS 4.3%

The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).

Productos afectados

n/a · n/a

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/3189no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/32966 http://secunia.com/advisories/23919 http://secunia.com/advisories/23936 https://www.exploit-db.com/exploits/3189 http://www.procheckup.com/Vulner_PR0614.php http://www.securityfocus.com/archive/1/457868/100/0/threaded http://www.vupen.com/english/advisories/2007/0346