CVE-2007-2512 Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alcatel-lucent omnipcx | = 7.0 | No fix listed |
References
- cert.uni-stuttgart.de vendor-advisory
- 38526 vdb-entry
- 20070607 RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0 mailing-list
- 24360 vdb-entry
- alcatellucent-voip-unauthorized-access(34760) vdb-entry