MPM HP-180W VOIP WIFI Phone Information Disclosure Vulnerability

Bugtraq ID:	16285
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 17 2006 12:00AM
Updated:	Jan 17 2006 12:00AM
Credit:	Shawn Merdinger <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	MPN HP-180W VOIP WIFI Phone WE.00.17
Not Vulnerable:

MPM HP-180W VOIP WIFI Phone Information Disclosure Vulnerability

The MPM HP-180W VOIP WIFI phone is prone to an information disclosure vulnerability.

Sensitive information may be disclosed to attackers, and could be useful in further attacks. Informataion obtained may aid an attacker to perform denial of service attacks.

MPM HP-180W phones with firmware version WE.00.17 is vulnerable to this issue. Due to code reuse, other devices and versions may also be affected. This issue may also be related to BID 15478 (Zyxel P2000W VOIP WIFI Phone Information Disclosure Vulnerability)

MPM HP-180W VOIP WIFI Phone Information Disclosure Vulnerability

An exploit is not required.

MPM HP-180W VOIP WIFI Phone Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MPM HP-180W VOIP WIFI Phone Information Disclosure Vulnerability

References:

• MPM HP-180W VOIP WIFI Phone Home Page (MPN)