VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-2291
voip_phone_firmware: Unspecified vulnerability in the web interface in s...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2291

Original

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-06-15
Source Information Category:
Advisory, Alert
Last Updated:
2010-06-15




Affected Product Tags
cpe:/a:snom:voip_phone_firmware:8.0.11:beta
cpe:/a:snom:voip_phone_firmware:8.0.12:beta
cpe:/a:snom:voip_phone_firmware:8.0.13:beta
cpe:/a:snom:voip_phone_firmware:8.1.1:beta
cpe:/a:snom:voip_phone_firmware:8.1.2:beta
cpe:/a:snom:voip_phone_firmware:8.1.3
cpe:/a:snom:voip_phone_firmware:8.2.1
cpe:/a:snom:voip_phone_firmware:8.2.10:beta
cpe:/a:snom:voip_phone_firmware:8.2.11:beta
cpe:/a:snom:voip_phone_firmware:8.2.16:beta
cpe:/a:snom:voip_phone_firmware:8.2.17:beta
cpe:/a:snom:voip_phone_firmware:8.2.18:beta
cpe:/a:snom:voip_phone_firmware:8.2.19:beta
cpe:/a:snom:voip_phone_firmware:8.2.20:beta
cpe:/a:snom:voip_phone_firmware:8.2.21:beta
cpe:/a:snom:voip_phone_firmware:8.2.22:beta
cpe:/a:snom:voip_phone_firmware:8.2.23:beta
cpe:/a:snom:voip_phone_firmware:8.2.24:beta
cpe:/a:snom:voip_phone_firmware:8.2.25:beta
cpe:/a:snom:voip_phone_firmware:8.2.26:beta
cpe:/a:snom:voip_phone_firmware:8.2.27:beta
cpe:/a:snom:voip_phone_firmware:8.2.28:beta
cpe:/a:snom:voip_phone_firmware:8.2.29:beta
cpe:/a:snom:voip_phone_firmware:8.2.2:beta
cpe:/a:snom:voip_phone_firmware:8.2.30:beta
cpe:/a:snom:voip_phone_firmware:8.2.31:beta
cpe:/a:snom:voip_phone_firmware:8.2.32:beta
cpe:/a:snom:voip_phone_firmware:8.2.33:beta
cpe:/a:snom:voip_phone_firmware:8.2.34:beta
cpe:/a:snom:voip_phone_firmware:8.2.3:beta
cpe:/a:snom:voip_phone_firmware:8.2.4:beta
cpe:/a:snom:voip_phone_firmware:8.2.5:beta
cpe:/a:snom:voip_phone_firmware:8.2.6:beta
cpe:/a:snom:voip_phone_firmware:8.2.7:beta
cpe:/a:snom:voip_phone_firmware:8.2.8:beta
cpe:/a:snom:voip_phone_firmware:8.2.9:beta
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]
[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]
[Integrity Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]
[Availability Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]
Alternatives




References
BID 40771




CONFIRM http://wiki.snom.com/Firmware/V8/Release_Notes/8.2.35




OSVDB 65383




SECUNIA 37635




Vulnerability Type Permissions, Privileges, and Access Control (CWE-264)Insufficient Information (NVD-CWE-noinfo)




XF snorm-interface-security-bypass(59342)




Copyright © 2010 JPCERT/CC All Rights Reserved.