Alexander Traud

The issue is related to a DNS misconfiguration in the Zyxel NBG7510 firmware, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode. This is due to insufficient access control.

The issue is related to incorrect access controls in the res srtp.c module, allowing a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.

Name of the Vulnerable Software and Affected Versions: Mitel 6800 and 6900 SIP series phones versions 5.1.0.2051 SP2 and earlier Description: A key length issue in the SRTP 128-bit key implementation could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call, potentially enabling the interception of sensitive information. Recommendations: For versions 5.1.0.2051 SP2 and earlier, update to a version later than 5.1.0.2051 SP2 to resolve the issue.

The issue concerns a TLS certificate verification vulnerability in the SIP TLS module. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks. This can lead to affected phones being registered abnormally, affecting the availability of IP phones. The vulnerability can be exploited by a remote attacker to perform such attacks.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and intercept packets in non-secure transmission mode. Successful exploitation may result in the interception and tampering of call information, leading to sensitive information leaks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and hijack the connection from a client when the user signs up to log in by TLS. This is due to insufficient authentication, which may be exploited to intercept and tamper with data information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and intercept call information when SRTP is enabled for making calls. This could lead to the leak of sensitive information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the chan sip function in Asterisk Open Source and Certified Asterisk systems, where setting the timert1 value in sip.conf to a value greater than 1245 allows remote attackers to cause a denial of service (file descriptor consumption) via vectors related to large retransmit timeout values.

The issue concerns the IPSec implementation when Hybrid Auth is used, where it fails to verify X.509 certificates from security gateways. This allows attackers to spoof security gateways and obtain sensitive information by using a crafted certificate.

The issue concerns the Private Browsing feature in CFNetwork, which fails to prevent the storage of permanent cookies when exiting Safari. This could allow physically proximate attackers to bypass cookie-based authentication by accessing an unattended workstation.