EUVD-2002-0761

Malware in sbrugna...

Cisco ATA-186 Password Circumvention / Recovery

The remote host appears to be a Cisco ATA-186 - an analog telephone adapter used to interface analog telephones to VoIP networks. The adapter is configured via a web interface that has a security bypass vulnerability. It is possible to bypass authentication by sending an HTTP POST request with a...

Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability Revision 1.0: INTERIM For Public Release 2002 May 23 16:00 GMT - ------------------------------------------------------------------------------- Contents ======== Summary Affected Products Detail...

Cisco ATA-186 admin password can be trivially circumvented

The Cisco ATA-186 Analog Telephone adapter interfaces "legacy" analog telephones to VoIP networks. The adapter can be configured via a web interface, that typically requires a password to access. Unfortunately, this password protection can be trivially circumvented. On two ATA-186s that we tested...

Protection bypass in Cisco ATA-186

It's possible to obtain web administration acces without administrative password...

Cisco ATA-186 - HTTP Device Configuration Disclosure

source: https://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration. Reportedly, HTTP requests consisting of a single character...