CVE-2015-0751

Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.31 is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800...

CVE-2015-0751

Cisco IP Phone 7861 is affected when using firmware from Cisco Unified Communications Manager 10.3(1). The issue stems from improper boundary restrictions when user-supplied input to the affected application is processed, allowing remote attackers to cause a denial of service by sending crafted p...

Cisco IP Phone 7861 Denial of Service Vulnerability

A vulnerability in the Cisco IP Phone 7861 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper boundary restrictions when user-supplied input to the affected application is processed. An...

CVE-2015-0602

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...

Cisco Unified IP Phone 9900 Series Insecure Device Permissions Vulnerability

A vulnerability in the Cisco Unified IP Phone 9900 Series could allow an authenticated, local attacker to cause a complete denial of service DoS on an affected device. The vulnerability is due to insecure file permissions on some devices. An attacker could exploit this vulnerability by writing to...

Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability

A vulnerability in the web framework of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to upload arbitrary files to the phone. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafte...

Cisco Unified IP Phone 9900 Series Denial of Service Vulnerability

A vulnerability in the Cisco Unified IP Phone 9900 Series could allow an authenticated, local attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

Cisco Unified IP Phone 9900 Series Mobility Extension Availability Vulnerability

A vulnerability in the mobility extension support of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to log off the mobility extension user. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability ...

Cisco Unified IP Phone 9900 Series Data Disclosure Vulnerability

A vulnerability in the mobility extension feature of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to obtain sensitive information. The vulnerability is due to insufficient protections of information in transit. An attacker could exploit this vulnerability by...

CVE-2013-5755

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of 1 user s7C9Cx.rLsWFA for the user account, 2 admin uoCbM.VEiKQto for the admin account, and 3 var jhl3iZAe./qXM for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2013-5755

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of 1 user s7C9Cx.rLsWFA for the user account, 2 admin uoCbM.VEiKQto for the admin account, and 3 var jhl3iZAe./qXM for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2013-5755

CVE-2013-5755 affects Yealink IP Phone SIP-T38G. The public records disclose a hardcoded credential issue in the web interface: config/.htpasswd contains user (s7C9Cx.rLsWFA), admin (uoCbM.VEiKQto), and var (jhl3iZAe./qXM) passwords, enabling remote access via unspecified vectors. Connected sourc...

YeaLink IP Phone Firmware <= 9.70.0.100 - Unauthenticated Phone Call Vulnerability

No description provided by source. Exploit Title: YeaLink IP Phone SIP-TxxP firmware =9.70.0.100 phone call vulnerability Date: 05-28-2013 Exploit Author: b0hr franciscoatgarnelo.eu Vendor Homepage: http://yealink.com Software Link:...

Nortel Networks Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone...

Nortel UNIStim IP Phone - Remote Ping Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting this issue allows remot...

Polycom IP Phone Web Interface Data Diclosure Vulnerability

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

YeaLink IP Phone SIP-TxxP firmware <= 9.70.0.100 - Multiple Vulnerabilities

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware =9.70.0.100 Multiple Vulnerabilities Date : 12-21-2012 Author : xistence...

Aastra IP Phone 9480i Web Interface Data disclosure Vulnerability

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Snom...

Snom IP Phone - Privilege Escalation

No description provided by source. Sense of Security - Security Advisory - SOS-12-001 Release Date. 23-Feb-2012 Last Update. - Vendor Notification Date. 27-Jan-2012 Product. Snom IP Phone series Platform. Hardware Affected versions. All versions prior to v8.4.35 Severity Rating. High Impact...