Secunia

Shawn Merdinger has reported a weakness in ZyXEL P-2000W_v2 VoIP Wi-Fi Phone, which can be exploited by malicious people to disclose system information and potentially cause a DoS (Denial of Service).

The weakness is caused due to the phone allowing connections to an undocumented service on port 9090/udp. This can be exploited to disclose the MAC address and the software version of the phone.

This may also be exploited to cause a DoS on an affected phone.

The weakness has been reported in firmware version WV.00.02. Other versions may also be affected.

Solution
Restrict use to within trusted networks only.

Provided and/or discovered by
Shawn Merdinger

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041438.html

Deep Links
Links available in Customer Area