ID
VAR-E-201406-0133
CVE
| cve_id: | CVE-2013-5755 | Trust: 2.1 |
EDB ID
33739
TITLE
Yealink VoIP Phone SIP-T38G - Default Credentials - Hardware remote Exploit
Trust: 0.6
DESCRIPTION
Yealink VoIP Phone SIP-T38G - Default Credentials. CVE-2013-5755CVE-108078 . remote exploit for Hardware platform
Trust: 0.6
AFFECTED PRODUCTS
| vendor: | yealink | model: | voip phone sip-t38g | scope: | - | version: | - | Trust: 2.1 |
EXPLOIT
Title: Yealink VoIP Phone SIP-T38G Default Credentials
Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team
Vendor Homepage: http://www.yealink.com/Companyprofile.aspx
Version: VoIP Phone SIP-T38G
CVE: CVE-2013-5755
Description:
Web interface use hardcoded default credential in /config/.htpasswd
user:s7C9Cx.rLsWFA admin:uoCbM.VEiKQto var:jhl3iZAe./qXM
Here's the cleartext password for these accounts:
user:user
admin:admin
var:var
--
*Mr.Un1k0d3r** or 1 #*
Trust: 1.0
EXPLOIT LANGUAGE
txt
Trust: 0.6
PRICE
free
Trust: 0.6
TYPE
Default Credentials
Trust: 1.6
TAGS
| tag: | exploit | Trust: 0.5 |
CREDITS
Mr.Un1k0d3r
Trust: 0.6
EXTERNAL IDS
| db: | NVD | id: | CVE-2013-5755 | Trust: 2.1 |
| db: | EXPLOIT-DB | id: | 33739 | Trust: 1.6 |
| db: | EDBNET | id: | 55159 | Trust: 0.6 |
| db: | PACKETSTORM | id: | 127094 | Trust: 0.5 |
REFERENCES
| url: | https://nvd.nist.gov/vuln/detail/cve-2013-5755 | Trust: 2.1 |
| url: | https://www.exploit-db.com/exploits/33739/ | Trust: 0.6 |
SOURCES
| db: | PACKETSTORM | id: | 127094 |
| db: | EXPLOIT-DB | id: | 33739 |
| db: | EDBNET | id: | 55159 |
LAST UPDATE DATE
2022-07-27T09:18:47.876000+00:00
SOURCES RELEASE DATE
| db: | PACKETSTORM | id: | 127094 | date: | 2014-06-13T13:49:32 |
| db: | EXPLOIT-DB | id: | 33739 | date: | 2014-06-13T00:00:00 |
| db: | EDBNET | id: | 55159 | date: | 2014-06-13T00:00:00 |