Senao SI-680H and SI-7800H VOIP WIFI Phones VxWorks Remote Debugger Access Vulnerability

Bugtraq ID:	15475
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Jan 17 2006 10:20PM
Credit:	Discovered by Shawn Merdinger <[email protected]>.
Vulnerable:	Senao SI-7800H VOIP WIFI Phone 0.03.0001 Senao SI-680H VOIP WIFI Phone 0.3 .0839
Not Vulnerable:

Senao SI-680H and SI-7800H VOIP WIFI Phones VxWorks Remote Debugger Access Vulnerability

Senao SI-680H and SI-7800H VOIP WIFI Phone allows remote debugger connections. Successful exploitation of this vulnerability could allow a remote attacker to obtain debugging information from the device or cause a denial of service.

Senao SI-680H VOIP WIFI Phones running firmware version 0.03.0839, and Sanao SI-7800H running firmware version 0.03.0001 are prone to this issue. Other versions may also be vulnerable.

Senao SI-680H and SI-7800H VOIP WIFI Phones VxWorks Remote Debugger Access Vulnerability

An exploit is not required.

Senao SI-680H and SI-7800H VOIP WIFI Phones VxWorks Remote Debugger Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Senao SI-680H and SI-7800H VOIP WIFI Phones VxWorks Remote Debugger Access Vulnerability

References:

• Home Page (Senao)