CVE-2005-3725
Last modified
CVE-2005-3725 is a vulnerability of currently unknown severity. Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers. NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.. EPSS estimates a 1.19% chance of exploitation in the next 30 days.
Description
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers. NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Prestige 2000w V.1voip Wi-Fi Phone | wj.00.10 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3725?
How severe is CVE-2005-3725?
How do I fix CVE-2005-3725?
Are you affected by CVE-2005-3725?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
