CyberSec.Space Logo
Back to CVE Browser

CVE-2007-2512

HIGH
7.5
CVSS Severity Score
EPSS Score0.0690%
EPSS Percentile23.20th
PublishedJun 7, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems.

Affected Platforms (CPE)

📦
Alcatel Lucent

Omnipcx

= 7.0

References & Advisories

🔗 http://cert.uni-stuttgart.de/advisories/al-ip-touch-vlan-filtering.php
🔗 http://osvdb.org/38526
🔗 http://www.securityfocus.com/archive/1/470742/100/0/threaded
🔗 http://www.securityfocus.com/bid/24360
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34760
🔗 http://cert.uni-stuttgart.de/advisories/al-ip-touch-vlan-filtering.php
🔗 http://osvdb.org/38526
🔗 http://www.securityfocus.com/archive/1/470742/100/0/threaded

Related Vulnerabilities

CVE-2002-169110.0

Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attacker...

CVE-2008-133110.0

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and ...

CVE-2007-30109.8

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attack...

CVE-2007-53618.5

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an I...