snom technology snom 320 VoIP Phone Multiple Vulnerabilities
BID:27767
Info
snom technology snom 320 VoIP Phone Multiple Vulnerabilities
| Bugtraq ID: | 27767 |
| Class: | Unknown |
| CVE: |
CVE-2008-1250 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | .mario from GNUCITIZEN is credited with discovering these issues. |
| Vulnerable: |
snom technology Snom 320 VoIP Phone 0 |
| Not Vulnerable: | |
Discussion
snom technology snom 320 VoIP Phone Multiple Vulnerabilities
snom 320 VoIP phone is prone to multiple vulnerabilities that affect its web interface. The vulnerabilities include a cross-site request-forgery issue and an HTML-injection issue.
Successful exploits of these issues will allow attackers to perform certain administrative actions and may lead to a complete compromise of affected devices.
These issues affect snom 320; other snom products may also be affected.
snom 320 VoIP phone is prone to multiple vulnerabilities that affect its web interface. The vulnerabilities include a cross-site request-forgery issue and an HTML-injection issue.
Successful exploits of these issues will allow attackers to perform certain administrative actions and may lead to a complete compromise of affected devices.
These issues affect snom 320; other snom products may also be affected.
Exploit / POC
snom technology snom 320 VoIP Phone Multiple Vulnerabilities
The following proof-of-concept code is available from GNUCitizen:
http://www.gnucitizen.org/projects/total-surveillance-made-easy-with-voip-phones
The following proof-of-concept code is available from GNUCitizen:
http://www.gnucitizen.org/projects/total-surveillance-made-easy-with-voip-phones
Solution / Fix
snom technology snom 320 VoIP Phone Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
snom technology snom 320 VoIP Phone Multiple Vulnerabilities
References:
References:
- snom 320 Product Page (snom technology)
- Total surveillance made easy with VoIP phones (GNUCITIZEN)