Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alcatel-Lucent OmniPCX Enterpise VOIP电话系统绕过认证漏洞
Vulnerability Description
OmniPCX Enterprise是一套企业级的集成交互通讯解决方案，结合了传统电话功能并支持Internet电话和多媒体通讯。 OmniPCX Enterprise的IP-Touch电话组件中所内嵌的迷你交换机没有正确地过滤多播或广播模式所接收的VLAN通讯，可能将其转发给菊花链设备。由于菊花链设备可以未经认证访问部分标记的VLAN，因此这导致设备的IEEE 802.1x机制失效，电话在执行认证后就用作了语音VLAN通讯的hub。 如果没有实施加密机制的话，在语音VLAN中使用广播或多播通讯的协商是以
CVSS Information
N/A
Vulnerability Type
N/A