Cisco IP Phone (VoIP) 7920 1.0(8) contains certain hard-coded ("fixed") public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information.
References
Link | Resource |
---|---|
http://secunia.com/advisories/17604/ | Broken Link Patch Vendor Advisory |
http://securitytracker.com/id?1015232 | Broken Link Third Party Advisory VDB Entry Vendor Advisory |
http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml | Broken Link Patch Vendor Advisory |
http://www.osvdb.org/20966 | Broken Link |
http://www.securityfocus.com/bid/15454 | Broken Link Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/23067 | Third Party Advisory VDB Entry |
http://secunia.com/advisories/17604/ | Broken Link Patch Vendor Advisory |
http://securitytracker.com/id?1015232 | Broken Link Third Party Advisory VDB Entry Vendor Advisory |
http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml | Broken Link Patch Vendor Advisory |
http://www.osvdb.org/20966 | Broken Link |
http://www.securityfocus.com/bid/15454 | Broken Link Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/23067 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 00:02
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/17604/ - Broken Link, Patch, Vendor Advisory | |
References | () http://securitytracker.com/id?1015232 - Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory | |
References | () http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml - Broken Link, Patch, Vendor Advisory | |
References | () http://www.osvdb.org/20966 - Broken Link | |
References | () http://www.securityfocus.com/bid/15454 - Broken Link, Third Party Advisory, VDB Entry | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/23067 - Third Party Advisory, VDB Entry |
13 Feb 2024, 16:48
Type | Values Removed | Values Added |
---|---|---|
First Time |
Cisco unified Wireless Ip Phone 7920
Cisco unified Wireless Ip Phone 7920 Firmware |
|
CWE | CWE-798 | |
CPE | cpe:2.3:h:cisco:unified_wireless_ip_phone_7920:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:unified_wireless_ip_phone_7920_firmware:1.0\(8\):*:*:*:*:*:*:* |
|
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/23067 - Third Party Advisory, VDB Entry | |
References | (CISCO) http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml - Broken Link, Patch, Vendor Advisory | |
References | (BID) http://www.securityfocus.com/bid/15454 - Broken Link, Third Party Advisory, VDB Entry | |
References | (OSVDB) http://www.osvdb.org/20966 - Broken Link | |
References | (SECTRACK) http://securitytracker.com/id?1015232 - Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory | |
References | (SECUNIA) http://secunia.com/advisories/17604/ - Broken Link, Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
Information
Published : 2005-11-24 11:03
Updated : 2024-11-21 00:02
NVD link : CVE-2005-3803
Mitre link : CVE-2005-3803
CVE.ORG link : CVE-2005-3803
JSON object : View
Products Affected
cisco
- unified_wireless_ip_phone_7920_firmware
- unified_wireless_ip_phone_7920
CWE
CWE-798
Use of Hard-coded Credentials