CVE-2006-0374

Published: Jan 22, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB remote debugging ONCRPC (aka wdbrpc) on UDP 17185, (2) reflect network data using echo (TCP 7), or (3) gain access without authentication using rlogin (TCP 513).

Affected (1)

Products: Advantage Century Telecommunication: P202s

Advantage Century Telecommunication

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Advantage Century Telecommunication P202s	Version 1.01.21_firmware_1.1.21

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (8)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18514

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/16288

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24149

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18514

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/16288

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24149

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.