9

CVE-2007-0528

EPSS 4.35%
Veröffentlicht 26.01.2007 01:28:00
Zuletzt bearbeitet 16.06.2026 22:35:45
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Centrality Communications ≫ Pa168 Chipset Version <= firmware_1.54

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.35%	0.9

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://osvdb.org/32966

http://secunia.com/advisories/23919

http://secunia.com/advisories/23936

http://www.procheckup.com/Vulner_PR0614.php

Vendor Advisory

http://www.securityfocus.com/archive/1/457868/100/0/threaded

http://www.vupen.com/english/advisories/2007/0346

https://www.exploit-db.com/exploits/3189

https://nvd.nist.gov/vuln/detail/CVE-2007-0528

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0528

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0528

EUVD