CVE-2005-3721

CVE-2005-3721 concerns the Hitachi IP5000 VOIP WIFI Phone (firmware 1.5.6) where the HTTP server’s default configuration does not require authentication for sensitive configuration pages. This allows remote attackers to modify device configuration without credentials. The available references con...

CVE-2005-3720

Hitachi WirelessIP5000 VOIP WiFi Phone 1.5.6 has a vulnerable HTTP server where the default index page exposes sensitive information (e.g., software versions). Connected sources also enumerate additional issues (e.g., unauthorized HTTP server access under factory default config and SNMP/administr...

CVE-2005-3719: Undefined Security Weakness

Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration...

CVE-2005-3722: Undefined Security Weakness

The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials...

CVE-2005-3720: Undefined Security Weakness

The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions...

CVE-2005-3723: Undefined Security Weakness

Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to 1 SNMP or 2 TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service...

CVE-2005-3721: Undefined Security Weakness

The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration...

Hitachi Groupmax Mail SMTP server DoS

No description provided...

Hitachi Web applications crossite scripting and DoS

No description provided...

[SA17635] Hitachi Groupmax Mail Denial of Service Vulnerability

TITLE: Hitachi Groupmax Mail Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17635 VERIFY ADVISORY: http://secunia.com/advisories/17635/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Groupmax Mail 7.x http://secunia.com/product/6160/ Groupmax Mail 6.x...

[SA17634] Hitachi Products Cross-Site Scripting and Denial of Service

TITLE: Hitachi Products Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA17634 VERIFY ADVISORY: http://secunia.com/advisories/17634/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, DoS WHERE: From remote SOFTWARE: Cosminexus 6.x http://secunia.com/product/5795/ Groupm...

Multiple Hitachi Wi-Fi VoIP phones vulnerabilities

Information leak, SNMP access, built-in hardware password, unauthenticated Web access TCP/8080 and shell access TCP/3390...

[Full-disclosure] Hitachi IP5000 VoIP Wifi phone multiple vulnerabilities

I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Hitachi PRODUCT: Hitachi IP5000 VOIP WIFI Pho...

CVE-2004-2498

Technical details (affected product, exact vulnerability, impact, and fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2499

Technical details for CVE-2004-2499 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2497

Cross-site scripting XSS vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vector...

CVE-2004-2498

Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors...

CVE-2004-2499

Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is "improperly accessed."...

CVE-2004-2497

The CVE-2004-2497 entry describes an XSS in the error handler of Hitachi Web Page Generator and Web Page Generator Enterprise (version 4.01 and earlier) when using the default error template with debug mode ON. This allows remote attackers to inject arbitrary script/HTML via unknown attack vector...

CVE-2004-2498: Undefined Security Weakness

Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors...