9

CVE-2007-0528

EPSS 15.01%
Veröffentlicht 26.01.2007 01:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Centrality Communications ≫ Pa168 Chipset Version <= firmware_1.54

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.01%	0.943

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://osvdb.org/32966

http://secunia.com/advisories/23919

http://secunia.com/advisories/23936

http://www.procheckup.com/Vulner_PR0614.php

Vendor Advisory

http://www.securityfocus.com/archive/1/457868/100/0/threaded

http://www.vupen.com/english/advisories/2007/0346

https://www.exploit-db.com/exploits/3189

https://nvd.nist.gov/vuln/detail/CVE-2007-0528

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0528

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0528

EUVD