FiWin SS28S Wi-Fi phones backdoor account

Phone has debug console with telnet access and hardcoded account 1 with password 1...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-5038

The CVE-2006-5038 entry documents a vulnerability in the FiWin SS28S WiFi VoIP SIP/Skype Phone running firmware 01_02_07, where a hard-coded username and password enables remote administrative access via Telnet. This is a network-accessible issue with partial confidentiality, integrity, and avail...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-5038: Undefined Security Weakness

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...