CVE-2005-3721: Medium severity hitachi ip5000 voip wifi phone vulnerability

Published Nov 21, 2005

Updated

The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.

Affected Software

7 affected components

Hitachi IP5000 VOIP WIFI Phone=1.5.0

Hitachi IP5000 VOIP WIFI Phone=1.5.4

Hitachi IP5000 VOIP WIFI Phone=1.5.6

Hitachi IP5000 VOIP WIFI Phone=1.5.5

Hitachi IP5000 VOIP WIFI Phone=1.5.10

Hitachi IP5000 VOIP WIFI Phone=1.5.8

Hitachi IP5000 VOIP WIFI Phone=1.5.2

Remediation

Patch Available

http://secunia.com/advisories/17628

Event History

Nov 21, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3721?

CVE-2005-3721 is considered a high severity vulnerability due to the lack of authentication for sensitive configuration pages.

How do I fix CVE-2005-3721?

To fix CVE-2005-3721, you should secure the HTTP server configuration to require authentication for all sensitive configuration pages.

What are the affected versions for CVE-2005-3721?

The affected versions of the Hitachi IP5000 VOIP WIFI Phone include 1.5.0, 1.5.2, 1.5.4, 1.5.5, 1.5.6, 1.5.8, and 1.5.10.

Can remote attackers exploit CVE-2005-3721?

Yes, remote attackers can exploit CVE-2005-3721 to modify the device configuration without authentication.

What is the impact of CVE-2005-3721?

The impact of CVE-2005-3721 includes unauthorized changes to the device settings, potentially leading to service disruption or unauthorized access.