Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2006-0010
Type: Vulnerability
Status: Candidate
Classification:
Authentication Management
Description:
The Hitachi IP5000 802.11 VOIP phone uses a hard-coded password to protect it from being configured by unauthorized parties.
Discussion:
The Hitachi IP5000 802.11 VOIP phone provides a means to configure it by using the keypad on the handset. In order to limit access to this functionality a hard-coded password of "0000" is used.
After gaining physical access it is possible for an attacker to reconfigure the phone or obtain information a user has stored in the phone such as their personal contacts.
Credits
Author:
Shawn
Merdinger
(shawnmer@gmail.com)
: None
References
URL:
http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
URL:
http://seclists.org/lists/fulldisclosure/2005/Nov/0543.html
URL:
http://www.wirelessip5000.com/
Released: 2005-11-16
Submitter
Andrew
Lockhart
(alockhart@networkchemistry.com)
: Network Chemistry
Submitted: Mon Jan 30 16:07:12 -0800 2006
Candidate Date: Wed Feb 01 10:23:04 -0800 2006
