[Full-disclosure] Clipcomm CP-100E VoIP wireless desktop phone open debug service TCP/60023

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== VENDOR: Clipcomm VENDOR NOTIFIED: 7 December, 2005 PRODUCT: Clipcomm CP-100E VoIP...

MPM HP-180W wireless VoIP phone information leak

Undocumented TCP/9090 leaks information on phone configuration...

[SA18479] Cisco IP Phones SYN Flood Device Reload Vulnerability

TITLE: Cisco IP Phones SYN Flood Device Reload Vulnerability SECUNIA ADVISORY ID: SA18479 VERIFY ADVISORY: http://secunia.com/advisories/18479/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Cisco IP Phone 7900 Series http://secunia.com/product/2809/ SOFTWARE: Cis...

Cisco IP Phones DoS

Syn-flood causes phone to reload...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Code injection

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...

Cisco IP Phone 7940 (Reboot) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ====================================================== Cisco IP Phone 7940 Reboot Denial of Service Exploit ====================================================== !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin...

Cisco IP Phone 7940 - Reboot (Denial of Service)

Cisco IP Phone 7940 - Reboot Denial of Service !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not...

Cisco IP Phone 7940 - Reboot (Denial of Service)

!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not private anymore. Vulnerable phones are running ver...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

CVE-2005-4190

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

CVE-2005-3803

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2005-3803

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2005-3804

The CVE-2005-3804 family is tied to Cisco IP Phone 7920 (VoIP) 1.0(8), where the device listens on UDP port 17185 to support a VxWorks debugger. This exposes a WDB debug service that remote attackers can use to obtain sensitive information and cause a denial of service. Related entries (Wind Rive...

CVE-2005-3803

Cisco IP Phone 7920 (VoIP) 1.0(8) is affected by hard-coded public and private SNMP community strings that cannot be changed, enabling potential remote information disclosure. The issue is documented across NVD/Nessus and Cisco advisories, with a vendor alert suggesting that fixed SNMP communitie...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

PT-2005-4555

Name of the Vulnerable Software and Affected Versions Cisco IP Phone VoIP 7920 version 1.08 Description The issue allows remote attackers to obtain sensitive information and cause a denial of service. This is due to the phone listening to UDP port 17185 for a VxWorks debugger. Recommendations For...