Unauthenticated Access to VxWorks Debugger in Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839

CVE-2005-3715 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.

Learn more about our Wireless Penetration Test.