RPS/APS vulnerability in snom/yealink and others

看板Bugtraq作者時間12年前 (2013/12/22 10:32), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串3/3 (看更多)
Hello, Discovered a vulnerability that allows for hundreds of thousands of SIP accounts to be compromised remotely. Found a year ago, partial vendor fixes but still vuln as of today, disclosed a few hours ago exclusively to the FreeSWITCH community - 23rd Oct 2013. Live disclosure can be seen here; http://www.youtube.com/watch?v=raXkHi_uGF8
Slides are here; https://www.dropbox.com/s/hp5fj7e7o1mdnyt/Auto%20provisioning%20sucks.pptx Cal
文章代碼(AID): #1Ijayc_O (Bugtraq)
文章代碼(AID): #1Ijayc_O (Bugtraq)