CVE-2007-0528
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-0528
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Centrality Communications(又称Aredfox)PA168 chipset和firmware 会话管理和敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
当由不同的IP电话提供时，Centrality Communications(又称Aredfox)PA168 chipset和firmware 1.54及之前版本执行的admin web控制台在使用HTTP时，没有要求身份认证标识或密码标识，这使得远程攻击者可以连接到现有的超级用户会话和获得敏感信息(密码和配置数据)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-0528
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-0528
Please Login to view more intelligence information
- http://www.procheckup.com/Vulner_PR0614.phpx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2007-0528
Same Patch Batch · n/a · 2007-01-26 · 33 CVEs total
| CVE-2007-0532 | Uploader 'userdata/user_1.txt' 密码信息泄露漏洞 | |
| CVE-2007-0515 | Microsoft Word 2000远程代码执行漏洞 | |
| CVE-2007-0514 | uCosminexus和Cosminexus Web服务器多个跨站攻击漏洞 | |
| CVE-2007-0513 | Hitachi HiRDB Datareplicator 7HiRDB Server 未明远程拒绝服务漏洞 | |
| CVE-2007-0512 | Hitachi TP1/LiNK OpenTP1端口拒绝服务攻击漏洞 | |
| CVE-2007-0511 | phpXMLDOM 多个PHP远程文件包含漏洞 | |
| CVE-2007-0510 | AWFFull 多个缓冲区溢出漏洞 | |
| CVE-2007-0509 | MaklerPlus 多个未明漏洞 | |
| CVE-2007-0508 | BBClone 'selectlang.php' 远程文件包含漏洞 | |
| CVE-2007-0507 | Drupal Acidfree模块节点标题SQL注入漏洞 | |
| CVE-2007-0506 | Drupal project_issue_access函数安全信息泄露漏洞 | |
| CVE-2007-0505 | Drupal未限制文件上传漏洞 | |
| CVE-2007-0504 | Vote! Pro 'poll_frame.php' eval注入漏洞 | |
| CVE-2007-0535 | Vote 多个eval注入漏洞 | |
| CVE-2007-0534 | Drupal 项目事件追踪模块多个跨站攻击漏洞 | |
| CVE-2007-0533 | Borland Delphi和Kylix AToZed IntraWeb组件远程拒绝服务漏洞 | |
| CVE-2007-0462 | Apple QuickDraw _GetSrcBits32ARGB()远程内存破坏漏洞 | |
| CVE-2007-0531 | FreeWebShop 'login.php' PHP远程文件包含漏洞 | |
| CVE-2007-0530 | Advanced Guestbook 多个PHP远程文件包含漏洞 | |
| CVE-2007-0529 | PHP Link Directory 'index.html'跨站脚本攻击漏洞 |
Showing top 20 of 33 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2007-0528
No comments yet