Cisco 7920 Wireless IP Phone Fixed SNMP Community String Vulnerability

Bugtraq ID:	15454
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Nov 16 2005 12:00AM
Credit:	Discovered by Shawn Merdinger.
Vulnerable:	Cisco 7920 Wireless IP Phone 1.0 (8)
Not Vulnerable:	Cisco 7920 Wireless IP Phone 1.0 (9)

Cisco 7920 Wireless IP Phone Fixed SNMP Community String Vulnerability

Cisco 7920 Wireless IP Phone is prone to a fixed default SNMP community string issue. This could allow remote attackers to retrieve and modify the device configuration.

Cisco 7920 Wireless IP Phones running firmware version 1.0(8) and earlier are vulnerable to this issue.

Cisco 7920 Wireless IP Phone Fixed SNMP Community String Vulnerability

An exploit is not required.

Cisco 7920 Wireless IP Phone Fixed SNMP Community String Vulnerability

Solution:
Cisco has released an updated firmware version to address this issue. Please see the referenced advisory for fix information.

Cisco 7920 Wireless IP Phone Fixed SNMP Community String Vulnerability

References:

• Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 (Cisco)
  
• Cisco Wireless IP Phone 7920 (Cisco)