5253 matches found
CVE-2007-1072
The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...
CVE-2007-1072
CVE-2007-1072 affects Cisco Unified IP Phone series (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) with firmware 8.0(4)SR1 and earlier. The CLI (command line interface) permits local users to obtain privileges or cause a denial of service via unspecified vectors. The issue can be leveraged remotely t...
Hardcoded credentials
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
CVE-2007-1063
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
CVE-2007-1063
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
CVE-2007-1063
Cisco Unified IP Phone models 7906G/7911G/7941G/7961G/7970G/7971G running firmware 8.0(4)SR1 and earlier have a hard-coded SSH credential issue in the SSH server that lets remote attackers access the device. Connected sources (NVD, Tenable, PRION, CVE lists) confirm the root cause as embedded cre...
CVE-2007-1072: Undefined Security Weakness
The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...
CVE-2007-1063: Use of Hard-coded Credentials
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
Cisco Unified IP Conference Station and IP Phone Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities Advisory ID: cisco-sa-20070221-phone http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Revision 1.0 For Public Release 2007 February 21 1600 UTC...
Use the phone to control the server-the vulnerabilities and early warning-the black bar safety net
It seems like the title is a bit scary, in fact, is the use of WAP plus WebShell。 Now many phones support WAP Internet access, as long as the slightly modified existing Web Backdoor code can be achieved WAP browser access. Traditional Web backdoors and browser interaction HTML, and WAP browser is...
Code injection
The LG Chocolate KG800 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...
CVE-2007-0522
The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...
CVE-2007-0524
The LG Chocolate KG800 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...
Bluetooth DoS by obex push
Hello, during a course project studying security and privacy related to Bluetooth, we discovered a simple but effective DoS attack using OBEX push. Using ussp-push 1, it is possible to send out files very quickly. By continuously trying to push a ?le, the target is ?ooded with prompts whether to...
Do-it-yourself unlock phone password-vulnerability warning-the black bar safety net
Crash This bar is estimated to be debugging the used,with caution,some crashes only under the battery. 9 9 9 89 2 6 6 display the receiving channel number and received signal strength; 9 9 9 87 8 6 display the contents of the boot time and the boot to the current a long time. Press-after displayi...
CVE-2006-6411
PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...
CVE-2006-6411
The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...
CVE-2006-6411: Undefined Security Weakness
PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...