Lucene search

K
cve[email protected]CVE-2010-2291
HistoryJun 15, 2010 - 2:04 p.m.

CVE-2010-2291

2010-06-1514:04:26
CWE-264
web.nvd.nist.gov
18
cve-2010-2291
snom
voip
phone
firmware
vulnerability
web interface
remote attackers
user credentials

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

69.4%

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
snomvoip_phone_firmwareMatch8.0.11beta
OR
snomvoip_phone_firmwareMatch8.0.12beta
OR
snomvoip_phone_firmwareMatch8.0.13beta
OR
snomvoip_phone_firmwareMatch8.1.1beta
OR
snomvoip_phone_firmwareMatch8.1.2beta
OR
snomvoip_phone_firmwareMatch8.1.3
OR
snomvoip_phone_firmwareMatch8.2.1
OR
snomvoip_phone_firmwareMatch8.2.2beta
OR
snomvoip_phone_firmwareMatch8.2.3beta
OR
snomvoip_phone_firmwareMatch8.2.4beta
OR
snomvoip_phone_firmwareMatch8.2.5beta
OR
snomvoip_phone_firmwareMatch8.2.6beta
OR
snomvoip_phone_firmwareMatch8.2.7beta
OR
snomvoip_phone_firmwareMatch8.2.8beta
OR
snomvoip_phone_firmwareMatch8.2.9beta
OR
snomvoip_phone_firmwareMatch8.2.10beta
OR
snomvoip_phone_firmwareMatch8.2.11beta
OR
snomvoip_phone_firmwareMatch8.2.16beta
OR
snomvoip_phone_firmwareMatch8.2.17beta
OR
snomvoip_phone_firmwareMatch8.2.18beta
OR
snomvoip_phone_firmwareMatch8.2.19beta
OR
snomvoip_phone_firmwareMatch8.2.20beta
OR
snomvoip_phone_firmwareMatch8.2.21beta
OR
snomvoip_phone_firmwareMatch8.2.22beta
OR
snomvoip_phone_firmwareMatch8.2.23beta
OR
snomvoip_phone_firmwareMatch8.2.24beta
OR
snomvoip_phone_firmwareMatch8.2.25beta
OR
snomvoip_phone_firmwareMatch8.2.26beta
OR
snomvoip_phone_firmwareMatch8.2.27beta
OR
snomvoip_phone_firmwareMatch8.2.28beta
OR
snomvoip_phone_firmwareMatch8.2.29beta
OR
snomvoip_phone_firmwareMatch8.2.30beta
OR
snomvoip_phone_firmwareMatch8.2.31beta
OR
snomvoip_phone_firmwareMatch8.2.32beta
OR
snomvoip_phone_firmwareMatch8.2.33beta
OR
snomvoip_phone_firmwareMatch8.2.34beta
VendorProductVersionCPE
snomvoip_phone_firmware8.2.23cpe:/a:snom:voip_phone_firmware:8.2.23:beta::
snomvoip_phone_firmware8.2.1cpe:/a:snom:voip_phone_firmware:8.2.1:::
snomvoip_phone_firmware8.2.9cpe:/a:snom:voip_phone_firmware:8.2.9:beta::
snomvoip_phone_firmware8.0.11cpe:/a:snom:voip_phone_firmware:8.0.11:beta::
snomvoip_phone_firmware8.0.13cpe:/a:snom:voip_phone_firmware:8.0.13:beta::
snomvoip_phone_firmware8.2.5cpe:/a:snom:voip_phone_firmware:8.2.5:beta::
snomvoip_phone_firmware8.2.10cpe:/a:snom:voip_phone_firmware:8.2.10:beta::
snomvoip_phone_firmware8.2.33cpe:/a:snom:voip_phone_firmware:8.2.33:beta::
snomvoip_phone_firmware8.0.12cpe:/a:snom:voip_phone_firmware:8.0.12:beta::
snomvoip_phone_firmware8.2.34cpe:/a:snom:voip_phone_firmware:8.2.34:beta::
Rows per page:
1-10 of 361

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

69.4%

Related for CVE-2010-2291