NVD

Id
48358  
Name
CVE-2009-1048  
Description
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-14  
Modified Date
2009-08-19  
Seq
2009-1048  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243177 48358 CVE-2009-1048 http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt  View
243178 48358 CVE-2009-1048 20090812 Authentication Bypass of Snom Phone Web Interface  View
243179 48358 CVE-2009-1048 snom-httphost-security-bypass(52424)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44894 JVNDB-2009-005901 snom VoIP phones snom 300 などの Web インターフェースにおける認証を回避される脆弱性 snom VoIP phones snom 300、snom 320、snom 360、snom 370、および snom 820 の Web インターフェースには、認証を回避される、電話機を再設定される、または任意の電話機を使用される可脆弱性が存在します。 CVE-2009-1048 38479 CVE-2009-1048 48358 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005901.html 2009-08-14 2012-12-20 View