Aastra 6753i hardware-encoded telephone Password Security Bypass Vulnerability

Release date:
Updated on: 2013-04-10

Affected Systems:
Aastra 6753i IP Telephone <= 3.2.2.56
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58935
 
Aastra 6753i IP Telephone is a carrier-level basic IP Phone.
 
A security vulnerability exists in versions earlier than Aastra 6753i IP Telephone 3.2.2.56. Attackers can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations.
 
<* Source: Timo Juhani linfors (timo.lindfors@iki.fi)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Aastra
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.aastra.com.cn/aastra-6753i.htm