CVE-2005-3724

Published: Nov 21, 2005Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication.

Affected (2)

Products: Zyxel: P2000w Version 1 Voip Wifi Phone, Prestige 2000w V.1voip Wi Fi Phone

Zyxel

2 products

P2000w Version 1 Voip Wifi Phone

Prestige 2000w V.1voip Wi Fi Phone

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Zyxel P2000w Version 1 Voip Wifi Phone	Version wj.00.10
Zyxel Prestige 2000w V.1voip Wi Fi Phone	Version wj.00.10

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://marc.info/?l=full-disclosure&m=113217443126673&w=2

Source: cve@mitre.org

http://www.osvdb.org/21292

Source: cve@mitre.org

http://www.securityfocus.com/bid/15478

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2476

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/23092

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=113217443126673&w=2