10 matches found
microprogrammed software Code Execution
The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Mitel SIP Phones Arbitrary Command Execution
The vulnerability of the microprogramming software of Mitel telephones of models 6800, 6900, 6970, and 6900w lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending...
authentication Privilege Escalation
The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges...
arbitrary command execution
The vulnerability of microprogrammed software in telephones and audio conferencing systems exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...
Poly Privilege Escalation
The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of necessary checks during password changes. Exploiting this vulnerability can allow a remote attacker to change the administrator’s password...
Multiple Cisco IP Products Arbitrary File Upload Vulnerability
Cisco IP, etc. are telephones developed by the U.S. company Cisco Cisco to provide a voice communication system over an IP network. An arbitrary file upload vulnerability exists in multiple Cisco IP products. A local attacker could exploit this vulnerability to upload arbitrary files to an affect...
Hacker made calls worth £10,000 from public phone
Hacker made calls worth £10,000 from public phone Computer expert Dariusz Ganski, of Sunny Bank, Kingswood, used a router to tap into BT phone boxes and made hours of calls to expensive numbers. He make calls worth £10,000 of premium-line bills and he has been jailed for 18 months. Prosecutor Dav...
RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0
Dear all, for your information. ------------------------------------------------------------------------ RUS-CERT Security Announcement 2007-06:01 1380 ================================================ The built-in Mini Switch in Alcatel-Lucent's IP-Touch Telephones under OmniPCX Enterprise 7.0 an...