First published: Mon Nov 21 2005(Updated: )
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zyxel Prestige 2000w V.1 VoIP Wi-Fi Phone | =wj.00.10 | |
Zyxel Prestige 2000w V.1 VoIP Wi-Fi Phone | =wj.00.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3724 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive information and denial of service.
To mitigate CVE-2005-3724, it is recommended to block access to UDP port 9090 and consider updating to a secure version if available.
CVE-2005-3724 allows remote attackers to execute information disclosure attacks and potentially trigger a denial of service.
CVE-2005-3724 affects Zyxel Prestige 2000W Version 1 VOIP WIFI Phone running firmware version wj.00.10.
No, CVE-2005-3724 does not require any authentication to exploit the vulnerability.