CVE-2005-3722: High severity hitachi ip5000 voip wifi phone vulnerability

Published Nov 21, 2005

Updated

The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials.

Affected Software

8 affected components

Hitachi IP5000 VOIP WIFI Phone=1.5.0

Hitachi IP5000 VOIP WIFI Phone=1.5.4

Hitachi IP5000 VOIP WIFI Phone=1.5.6

Hitachi IP5000 VOIP WIFI Phone=1.5.5

Hitachi IP5000 VOIP WIFI Phone=1.5.10

Hitachi IP5000 VOIP WIFI Phone=1.5.8

Hitachi IP5000 VOIP WIFI Phone=2.0.0

Hitachi IP5000 VOIP WIFI Phone=1.5.2

Remediation

Patch Available

http://secunia.com/advisories/17628

Event History

Nov 21, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3722?

CVE-2005-3722 is considered a critical vulnerability due to the potential for unauthorized remote access and manipulation of system configurations.

How do I fix CVE-2005-3722?

To mitigate CVE-2005-3722, update the Hitachi IP5000 VOIP WIFI Phone to the latest version that addresses this vulnerability.

Which versions of Hitachi IP5000 VOIP WIFI Phone are affected by CVE-2005-3722?

CVE-2005-3722 affects Hitachi IP5000 VOIP WIFI Phone versions 1.5.0, 1.5.2, 1.5.4, 1.5.5, 1.5.6, 1.5.8, 1.5.10, and 2.0.0.

What type of attacks can exploit CVE-2005-3722?

CVE-2005-3722 can be exploited by attackers using arbitrary SNMP credentials to gain unauthorized read or write access to system configurations.

Is there a workaround for CVE-2005-3722?

A potential workaround for CVE-2005-3722 is to disable the SNMP daemon if it is not required for system operation.