[原文]ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090.
ZyXEL P-2000W_v2 VoIP Wi-Fi Phone UDP Port 9090 Information Disclosure
Remote / Network Access
Information Disclosure
Loss of Confidentiality
Exploit Unknown
-
漏洞描述
ZyXEL P-2000W_v2 VoIP Wi-Fi Phone contains a flaw that may lead to an unauthorized information disclosure. An undocumented service is running on UDP port 9090 and some information about the device could be obtained from it :
- Software/Firmware version
- MAC address
This will disclose information about the phone device resulting in a loss of confidentiality.
-
时间线
2006-01-17
2005-12-07
2006-01-16
Unknow
-
解决方案
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
三人行，必有我师焉。择其善者而从之，其不善者而改之。