Hardcoded credentials

2006-01-2220:03:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.0%

JSON

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks.

CPENameOperatorVersion
p202seq1.1.21-firmware-1.1.21

CPE	Name	Operator	Version
	p202s	eq	1.1.21-firmware-1.1.21

References

lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html

secunia.com/advisories/18514

www.securityfocus.com/bid/16288

exchange.xforce.ibmcloud.com/vulnerabilities/24149