Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities

Bugtraq ID:	61044
Class:	Input Validation Error
CVE:	CVE-2013-5620 CVE-2013-5621 CVE-2013-5622 CVE-2013-5623 CVE-2013-5624 CVE-2013-5625 CVE-2013-5626 CVE-2013-5627 CVE-2013-5628 CVE-2013-5629 CVE-2013-5630 CVE-2013-5631 CVE-2013-5632 CVE-2013-5633
Remote:	Yes
Local:	No
Published:	Jul 09 2013 12:00AM
Updated:	Sep 03 2013 12:11AM
Credit:	Kyle Lovett
Vulnerable:
Not Vulnerable:

Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities

Multiple Zoom Telephonics devices are prone to an information-disclosure vulnerability, multiple authentication bypass vulnerabilities and an SQL-injection vulnerability.

Exploiting these issues could allow an attacker to gain unauthorized access and perform arbitrary actions, obtain sensitive information, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example data is available:

• /data/vulnerabilities/exploits/61044.txt

Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities

References: