Lucene search
HistoryNov 21, 2005 - 11:03 a.m.
CVE-2005-3721
hitachi
ip5000
voip
wifi phone
authentication bypass
configuration modification
cve-2005-3721
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.4%
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
Affected configurations
Node
hitachiip5000_voip_wifi_phoneMatch1.5.0
ORhitachiip5000_voip_wifi_phoneMatch1.5.2
ORhitachiip5000_voip_wifi_phoneMatch1.5.4
ORhitachiip5000_voip_wifi_phoneMatch1.5.5
ORhitachiip5000_voip_wifi_phoneMatch1.5.6
ORhitachiip5000_voip_wifi_phoneMatch1.5.8
ORhitachiip5000_voip_wifi_phoneMatch1.5.10
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.4%
Related for CVE-2005-3721