Alexander Traud

O problema está relacionado a uma configuração incorreta do DNS no firmware do Zyxel NBG7510, o que poderia permitir que um invasor não autenticado acessasse o servidor DNS quando o dispositivo fosse colocado no modo AP. Isso se deve a um controle de acesso insuficiente.

O problema está relacionado a controles de acesso incorretos no módulo res srtp.c, permitindo que um invasor remoto não autenticado encerre prematuramente chamadas seguras ao reproduzir pacotes SRTP.

**Nome do software vulnerável e versões afetadas: Telefones da série SIP Mitel 6800 e 6900, versões 5.1.0.2051 SP2 e anteriores Descrição: Um problema relacionado ao comprimento da chave na implementação da chave SRTP de 128 bits pode permitir que um invasor lance um ataque man-in-the-middle quando o SRTP for usado em uma chamada, possibilitando potencialmente a interceptação de informações confidenciais. Recomendações: Para as versões 5.1.0.2051 SP2 e anteriores, atualize para uma versão posterior à 5.1.0.2051 SP2 para resolver o problema.

The issue concerns a TLS certificate verification vulnerability in the SIP TLS module. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks. This can lead to affected phones being registered abnormally, affecting the availability of IP phones. The vulnerability can be exploited by a remote attacker to perform such attacks.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and intercept packets in non-secure transmission mode. Successful exploitation may result in the interception and tampering of call information, leading to sensitive information leaks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and hijack the connection from a client when the user signs up to log in by TLS. This is due to insufficient authentication, which may be exploited to intercept and tamper with data information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Huawei eSpace (affected versions not specified) Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and intercept call information when SRTP is enabled for making calls. This could lead to the leak of sensitive information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the chan sip function in Asterisk Open Source and Certified Asterisk systems, where setting the timert1 value in sip.conf to a value greater than 1245 allows remote attackers to cause a denial of service (file descriptor consumption) via vectors related to large retransmit timeout values.

The issue concerns the IPSec implementation when Hybrid Auth is used, where it fails to verify X.509 certificates from security gateways. This allows attackers to spoof security gateways and obtain sensitive information by using a crafted certificate.

The issue concerns the Private Browsing feature in CFNetwork, which fails to prevent the storage of permanent cookies when exiting Safari. This could allow physically proximate attackers to bypass cookie-based authentication by accessing an unattended workstation.