CVEvulnerability
CVE-2005-3725
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Description
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers. NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.
Affected configurations
• zyxel prestige 2000w v.1voip wi-fi phone wj.00.10
References
- http://marc.info/?l=full-disclosure&m=113217443126673&w=2 marc.info
- http://www.securityfocus.com/bid/15478 www.securityfocus.com
- http://marc.info/?l=full-disclosure&m=113217443126673&w=2 marc.info
- http://www.securityfocus.com/bid/15478 www.securityfocus.com