The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Senao SI-7800H VoIP Wireless Phone Information Disclosure and DoS
------------------------------------------------------------------------
SUMMARY
"
<http://www.senao.com/english/product/product_wired_dsl_1.asp?pgtl=Wired&tp1id=03&tp2id=02&proid=000188>
Senao SI-7800H is a wireless VoIP phone".
An undocumented port and service in Senao SI-7800H allows attackers to
gain information and DoS the wireless VoIP phone.
DETAILS
Vulnerable Systems:
* Senao SI-7800H Firmware version 0.03.0001, BSP version V 2_2_1/33
An undocumented open port, UDP/17185, VxWorks WDB remote debugging
(wdbrpc) is left in from development.
This open port may allow an attacker unauthenticated access to the phone's
OS, retrieve sensitive information, and perform a DoS attack.
ADDITIONAL INFORMATION
The information has been provided by <mailto:shawnmer@gmail.com> Shawn
Merdinger.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
