CVE-2005-3716

Опубликовано: 21 нояб. 2005

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html
Broken Link
Vendor Advisory
http://secunia.com/advisories/17629
Broken Link
Vendor Advisory
http://www.securityfocus.com/bid/15476
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/2472
Broken Link
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html
Broken Link
Vendor Advisory
http://secunia.com/advisories/17629
Broken Link
Vendor Advisory
http://www.securityfocus.com/bid/15476
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/2472
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:utstarcom:f1000_wi-fi_firmware:2.0:*:*:*:*:*:*:*

cpe:2.3:h:utstarcom:f1000_wi-fi:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00507

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-59g7-r33p-jwx9