CVE-2002-0672

The CVE-2002-0672 entry concerns Pingtel xpressa SIP phones (versions 1.2.5–1.2.7.4) where the administrator password is null due to a factory reset without authentication via the GUI. The linked advisory and CVE records detail multiple issues affecting PX-1 devices, including local/remote admini...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...

bug found

NetworkEverywhere router Model NR041 latest firmware rev 1.2 Release 03 suffers a "script injection over dhcp" vulnerability. The NR041 does not filter DHCP HOSTNAME options coming from its clients. Because of that, we can inject a web script into the web based administrative interface and wait...

networkEverywhere.txt

NetworkEverywhere router Model NR041 latest firmware rev 1.2 Release 03 suffers a "script injection over dhcp" vulnerability. The NR041 does not filter DHCP HOSTNAME options coming from its clients. Because of that, we can inject a web script into the web based administrative interface and wait...

[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)

i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...