CVE-2005-3716 Hardcoded credentials in n/a
Attackers can obtain sensitive information from UTStarcom F1000 VOIP phones due to unchangeable hard-coded SNMP credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-3716?
CVE-2005-3716 is a high-severity vulnerability in n/a, published on 21 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information.
Weakness: CWE-798
Which versions are affected by CVE-2005-3716?
It affects 1 product.
Products include Utstarcom F1000 Wi-Fi Firmware.
How do I fix CVE-2005-3716?
No fix has been published for CVE-2005-3716 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-3716 being exploited?
There is no known exploitation of CVE-2005-3716 in the wild and no public exploit code.
Sources
Also known as GHSA-59g7-r33p-jwx9.