Unscored severity · published Nov 21, 2005
CVE-2005-3720
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions
–
CVSS
1.2%
EPSS
No
On KEV
Description
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IV
Ip5000 Voip Wifi Phone · Hitachi
1.5.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3720
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3720
marc.info
http://marc.info/?l=full-disclosure&m=113217425618951&w=2
Patch
http://secunia.com/advisories/17628
www.hitachi-cable.co.jp
http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
More from Ip5000 Voip Wifi Phone
–
CVE-2005-3719
Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the…
–
CVE-2005-3721
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote…
–
CVE-2005-3722
The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials
–
CVE-2005-3723
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using…