CVEvulnerability
CVE-2005-3721
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
Affected configurations
• hitachi ip5000 voip wifi phone 1.5.0
• hitachi ip5000 voip wifi phone 1.5.2
• hitachi ip5000 voip wifi phone 1.5.4
• hitachi ip5000 voip wifi phone 1.5.5
• hitachi ip5000 voip wifi phone 1.5.6
• hitachi ip5000 voip wifi phone 1.5.8
• hitachi ip5000 voip wifi phone 1.5.10
References
- http://marc.info/?l=full-disclosure&m=113217425618951&w=2 marc.info
- http://secunia.com/advisories/17628 Patch, Vendor Advisory
- http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf www.hitachi-cable.co.jp
- http://marc.info/?l=full-disclosure&m=113217425618951&w=2 marc.info
- http://secunia.com/advisories/17628 Patch, Vendor Advisory
- http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf www.hitachi-cable.co.jp