ID
VAR-201703-1382
TITLE
DBLTek GoIP 'dbladm' User Unauthorized Access Vulnerability
Trust: 0.6
DESCRIPTION
DBLTechnology is a manufacturer of communication equipment in Shenzhen. Its main products include GSM voice gateway, IP telephony gateway, enterprise-class softswitch, etc., which are mostly used by telephone companies and VoIP service providers. The DBLTekGoIP 'dbladm' user has an unauthorized access vulnerability. The attacker obtains sensitive information about the device by logging in \"ctlcmd\" and \"limitsh\" and accessing it with the user-configured administrator password, and obtaining a shell with root privileges on the affected device.
Trust: 0.6
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | debole | model: | voip gsm gateway | scope: | - | version: | - | Trust: 0.6 |
| vendor: | debole | model: | goip | scope: | eq | version: | 1 | Trust: 0.6 |
| vendor: | debole | model: | goip | scope: | eq | version: | 4 | Trust: 0.6 |
| vendor: | debole | model: | goip | scope: | eq | version: | 8 | Trust: 0.6 |
| vendor: | debole | model: | goip | scope: | eq | version: | 16 | Trust: 0.6 |
| vendor: | debole | model: | goip | scope: | eq | version: | 32 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2017-02725 | Trust: 0.6 |
REFERENCES
| url: | https://www.trustwave.com/resources/spiderlabs-blog/undocumented-backdoor-account-in-dbltek-goip/ | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2017-02725 |
LAST UPDATE DATE
2022-05-04T09:29:41.225000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2017-02725 | date: | 2017-03-14T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2017-02725 | date: | 2017-03-14T00:00:00 |