CVE-2005-3715
UnknownEPSS 1.93%
Last modified
CVE-2005-3715 is a vulnerability of currently unknown severity. Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.. EPSS estimates a 1.93% chance of exploitation in the next 30 days.
Description
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Senao | Si-680h Wireless Voip Phone | 1.7.0_firmware_0.03.0839 |
References
- http://secunia.com/advisories/17606Vendor Advisory
- http://secunia.com/advisories/17606Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3715?
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.
How severe is CVE-2005-3715?
Severity scoring for CVE-2005-3715 is pending analysis. The EPSS model estimates a 1.93% probability of exploitation in the next 30 days.
How do I fix CVE-2005-3715?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3709Integer underflow in Apple Quicktime before 7.0.4 allows rem…
- CVE-2005-3710Integer overflow in Apple Quicktime before 7.0.4 allows remo…
- CVE-2005-3711Integer overflow in Apple Quicktime before 7.0.4 allows remo…
- CVE-2005-3712Heap-based buffer overflow in rsync in Mac OS X 10.4 through…
- CVE-2005-3713Heap-based buffer overflow in Apple Quicktime before 7.0.4 a…
- CVE-2005-3714The network interface for Apple AirPort Express 6.x before F…
- CVE-2005-3716The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 runn…7.5
- CVE-2005-3717The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 ru…
- CVE-2005-3718UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 w…
- CVE-2005-3719Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded admini…
- CVE-2005-3720The default index page in the HTTP server in Hitachi IP5000 …
- CVE-2005-3721The default configuration of the HTTP server in Hitachi IP50…
Are you affected by CVE-2005-3715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST