CVE-2005-3716

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.htmlBroken Link, Vendor Advisory
http://secunia.com/advisories/17629Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/15476Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2005/2472Broken Link
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.htmlBroken Link, Vendor Advisory
http://secunia.com/advisories/17629Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/15476Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2005/2472Broken Link

Timeline

Published: Nov 21, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-37177.5The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and pas CVE-2005-37187.5UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) th CVE-2005-37194.6Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtai CVE-2005-37205.0The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.CVE-2005-37215.0The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configura CVE-2005-37227.5The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration CVE-2005-37237.5Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attacke CVE-2005-37246.4Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of servi CVE-2005-37256.4Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause CVE-2005-37267.5SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query paramet CVE-2005-37277.5SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQ CVE-2005-37285.0Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote