Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Snom VoIP电话Host头绕过认证漏洞
Vulnerability Description
Snom是德国的一家VoIP电话厂商。 Snom VoIP电话内嵌的Web接口受Basic认证或Digest认证的保护。如果远程攻击者修改了HTTP请求，就可以绕过认证。正常的浏览器会将请求头Host:设置为浏览器URL字段中的主机名。如果将请求头修改为包含有Host: 127.0.0.1，就可以绕过认证访问Web界面的所有页面和功能。
CVSS Information
N/A
Vulnerability Type
N/A