CVE-2007-0528 | BDVDB-2026-21852 Detail

Description#

The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/23936
http://www.vupen.com/english/advisories/2007/0346
http://www.procheckup.com/Vulner_PR0614.php
http://www.securityfocus.com/archive/1/457868/100/0/threaded
http://secunia.com/advisories/23919
http://osvdb.org/32966
https://www.exploit-db.com/exploits/3189

Exploit#

https://www.exploit-db.com/exploits/3189

History#

Version 12007-01-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.