ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities

Bugtraq ID:	16288
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 17 2006 12:00AM
Updated:	Jan 17 2006 12:00AM
Credit:	Discovered by Shawn Merdinger <[email protected]>.
Vulnerable:	Advantage Century Telecommunication P202S VOIP WIFI Phone 1.0 1.21
Not Vulnerable:

ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities

ACT P202S VOIP WIFI Phone allows remote debugger connections and remote unauthenticated administrative access. Successful exploitation of these vulnerabilities could allow a remote attacker to obtain debugging information from the device or cause a denial of service. Other attacks are also possible.

ACT P202S VOIP WIFI Phones running firmware version 1.01.21 is prone to these issues. Due to code reuse, other devices and versions may also be affected.

ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities

An exploit is not required.

ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities

References:

• ACT P202S Product Page (Advantage Century Telecommunications)