Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-5755
HistoryJul 16, 2014 - 2:19 p.m.

CVE-2013-5755

2014-07-1614:19:02
CWE-255
[email protected]
web.nvd.nist.gov
23
cve-2013-5755
yealink
ip phone
sip-t38g
.htpasswd
hardcoded password
remote attackers
access
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.7%

JSON

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected configurations

NVD
Node
yealinksip-t38gMatch-
CPENameOperatorVersion
yealink:sip-t38gyealink sip-t38geq-

Related

prion 1
nvd 1
exploitpack 2
seebug 2
packetstorm 2
cvelist 1
exploitdb 2
zdt 1
openvas 1
prion
prion
Hardcoded credentials
2014-07-16 14:19:00
nvd
nvd
CVE-2013-5755
2014-07-16 14:19:02
exploitpack
exploitpack
Yealink VoIP Phone SIP-T38G - Default Credentials
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-06-13 00:00:00
seebug
seebug
Yealink VoIP Phone SIP-T38G - Default Credentials
2014-07-01 00:00:00
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-07-01 00:00:00
packetstorm
packetstorm
Yealink VoIP Phone SIP-T38G Default Credentials
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G Remote Command Execution
2014-06-13 00:00:00
cvelist
cvelist
CVE-2013-5755
2014-07-16 14:00:00
exploitdb
exploitdb
Yealink VoIP Phone SIP-T38G - Default Credentials
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-06-13 00:00:00
zdt
zdt
Yealink VoIP Phone SIP-T38G - Multiple Vulnerabilities
2014-06-14 00:00:00
openvas
openvas
Yealink VoIP Phone SIP-T38G Multiple Vulnerabilities
2014-06-20 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.7%

JSON
Related for CVE-2013-5755
prion1nvd1exploitpack2seebug2packetstorm2cvelist1exploitdb2zdt1openvas1