PT-2008-6052
CVE-2008-4874
·
Publicado
2008-10-31
·
Atualizado
2018-10-11
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Philips Electronics VOIP841 DECT Phone versions 1.0.4.50 through 1.0.4.80
Description
The issue concerns a back door "service" account with a predefined password, making it easier for remote attackers to gain access.
Recommendations
For versions 1.0.4.50 through 1.0.4.80, consider changing the password of the "service" account to a strong and unique one to prevent unauthorized access. As a temporary workaround, restrict access to the device until a patch is available.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾