Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability

Bugtraq ID:	15478
Class:	Access Validation Error
CVE:	CVE-2005-3724 CVE-2005-3725
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Shawn Merdinger <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	ZyXEL Prestige 2000W v.2 VoIP Wi-Fi Phone ZyXEL Prestige 2000W v.1 VoIP Wi-Fi Phone
Not Vulnerable:

Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability

The Zyxel P2000W VOIP WIFI Phone is prone to an information disclosure vulnerability.

Sensitive information may be disclosed to attackers, and could be useful in further attacks. Informataion obtained may aid an attacker to perform denial of service attacks.

Both version 1, and 2 of these phones are vulnerable to this issue. Due to code reuse, other devices and versions may also be affected.

Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability

An exploit is not required.

Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability

References:

• Vendor Homepage (ZyXEL)