CVE-2009-1048

CRITICAL9.8

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6

Published Aug 14, 2009

Modified 1 years ago

Details

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.

References

ADVISORY

http://secunia.com/advisories/36293

WEB

http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt

WEB

http://www.securityfocus.com/archive/1/505723/100/0/threaded

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/52424

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2009-1048

CVSS Analysis