Secunia

Shawn Merdinger has reported some security issues in ACT WLAN Phone P202S, which can be exploited by malicious people to potentially disclose system information, potentially cause a DoS (Denial of Service), and bypass certain security restrictions.

1) An error caused due to the phone allowing connections from the VxWorks WDB remote debugger on port 17185/udp may be exploited to gain access to the phone's OS and to collect debugging information.

2) An error caused due to the phone allowing connections to the echo service on port 7/tcp may be exploited to cause a DoS on other network devices.

3) An error caused due to the phone allowing connections to the rlogin service on port 513/tcp can be exploited to gain rlogin access to the phone without authentication.

It has also been reported that the phone has a hardcoded NTP server.

The security issues have been reported in version 1.01.21. Other versions may also be affected.

Solution
Restrict use to within trusted networks only.

Provided and/or discovered by
Shawn Merdinger

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html

Deep Links
Links available in Customer Area