Title: ACT P202S VOIP WIFI Phones Multiple Remote Vulnerabilities
Severity: CRITICAL
Description:
ACT P202S VOIP WIFI Phone provides Voice Over IP (VOIP) service through 802.11b wireless networks.
ACT P202S VOIP WIFI Phone listens for connections from a remote VxWorks debugger on UDP port 17185. This could allow a remote attacker to connect to a device and obtain debugging information. The debugging information could be useful in further attacks. Denial of service attacks through this port are also possible.
A second issue is an unauthenticated remote administrative access vulnerability. This issue is due to an rlogin service listening on TCP port 513. By connecting to this port, remote attackers may access an administrative shell without prior authentication.
ACT P202S VOIP WIFI Phones running firmware version 1.01.21 is prone to these issues. Due to code reuse, other devices and versions may also be affected.
Affected Products:
- Advantage Century Telecommunication P202S VOIP WIFI Phone 1.0.01.21
References:
- Advantage Century Telecommunications: ACT P202S Product Page
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
