CVEvulnerability

CVE-2013-5755

10.0 HIGH Published 2014-07-16 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2014-07-16
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-255

Description

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected configurations

• yealink sip-t38g

Weakness · not in database (1)

CWE-255

References

http://www.exploit-db.com/exploits/33739 Exploit
http://www.exploit-db.com/exploits/33739 Exploit

CVE-2013-5755

Description

Affected configurations

Related

Weakness · not in database (1)

References