CVE-2007-1072

The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...

CVE-2007-1072

CVE-2007-1072 affects Cisco Unified IP Phone series (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) with firmware 8.0(4)SR1 and earlier. The CLI (command line interface) permits local users to obtain privileges or cause a denial of service via unspecified vectors. The issue can be leveraged remotely t...

CVE-2007-1072

The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...

Hardcoded credentials

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

CVE-2007-1063

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

CVE-2007-1063

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

CVE-2007-1063

Cisco Unified IP Phone models 7906G/7911G/7941G/7961G/7970G/7971G running firmware 8.0(4)SR1 and earlier have a hard-coded SSH credential issue in the SSH server that lets remote attackers access the device. Connected sources (NVD, Tenable, PRION, CVE lists) confirm the root cause as embedded cre...

Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities Advisory ID: cisco-sa-20070221-phone http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Revision 1.0 For Public Release 2007 February 21 1600 UTC...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

Cisco IP Phone Detection

Binary data 3771.prm...

AgePhone software SIP IP phone buffer overflow

Buffer overflow on SIP packet parsing...

Authentication flaw

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0375

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...

CVE-2006-0360

The CVE-2006-0360 entry affects the MPM SIP HP-180W Wireless IP Phone WE.00.17. An unauthenticated remote access path exists via UDP port 9090 (undocumented), enabling potential exposure of sensitive information and a possible denial of service. The description specifies no authentication require...

CVE-2006-0360

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...

CVE-2006-0374

The CVE-2006-0374 entry applies to Advantage Century Telecommunication (ACT) P202S IP Phone firmware 1.1.21 (software version 1.01.21). The vulnerability involves multiple undocumented ports that could be abused: (1) access to VxWorks WDB remote debugging ONCRPC (wdbrpc) over UDP 17185, potential...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0375

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...