CVE-2008-4874 The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attac...
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| philips electronics voip841 dect phone | = 1.0.4.48 | No fix listed |
| philips electronics voip841 dect phone | = 1.0.4.50 | No fix listed |
References
- 20080215 Re: Philips VOIP841 Multiple Vulnerabilities mailing-list
- 42940 vdb-entry
- 28978 third-party-advisory vendor-advisory
- 4536 third-party-advisory
- www.securenetwork.it exploit
- 20080214 Philips VOIP841 Multiple Vulnerabilities mailing-list
- 27790 vdb-entry
- ADV-2008-0583 vdb-entry
- 5113 exploit