Secunia

Sipera VIPER Lab has reported a security issue in the Snom 320 SIP Phone, which can be exploited by malicious people to disclose sensitive information and to bypass certain security restrictions.

The problem is that certain functionality is accessible via port 1800/TCP without any authentication. This can be exploited e.g. to disclose call data records or to call a random number by accessing port 1800/TCP directly.

The security issue is reported in Snom 320 SIP Phone (Kernel Version: snom320 linux 3.25, Application-Version: snom320-SIP 6.2.3)

Solution
Restrict access to port 1800/TCP.

Provided and/or discovered by
Sipera VIPER Lab

Original Advisory
Sipera:
http://www.sipera.com/index.php?action=resources,threat_advisory&tid=275
http://www.sipera.com/index.php?action=resources,threat_advisory&tid=276

Deep Links
Links available in Customer Area