Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco ATA-186 WEB管理接口访问验证可绕过漏洞
Vulnerability Description
Cisco ATA-186模拟电话适配卡是设计用于模拟电话和IP电话(VoIP)接口的硬件设备，包含基于WEB的配置接口。 Cisco ATA-186在处理特殊方式密码请求时存在漏洞，可导致远程攻击者绕过验证无需密码访问WEB接口。 通过查看配置工具屏幕页面的源代码，可知没有隐藏参数用于维持状态，所以可相信设备使用类型和HTTP输入来判断是否允许配置： 如：如果三个没有任何值的"ChangeUIPasswd"参数提供给系统，ATA-186会显示登录屏幕，类似的，如果"ChangeUIPasswd"三个值全
CVSS Information
N/A
Vulnerability Type
N/A