CVE-2009-1048 : The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.

Published 2009-08-14 15:16:27

Updated 2024-02-13 17:38:45

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2009-1048

Snom » Snom 300 Firmware
Versions from including (>=) 7.1 and before (<) 7.1.39
cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 300 » Version: N/A
Snom » Snom 300 Firmware
Versions from including (>=) 6.5 and before (<) 6.5.20
cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 300 » Version: N/A
Snom » Snom 300 Firmware
Versions from including (>=) 7.3 and before (<) 7.3.14
cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 300 » Version: N/A
Snom » Snom 320 Firmware
Versions from including (>=) 6.5 and before (<) 6.5.20
cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 320 » Version: N/A
Snom » Snom 320 Firmware
Versions from including (>=) 7.3 and before (<) 7.3.14
cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 320 » Version: N/A
Snom » Snom 320 Firmware
Versions from including (>=) 7.1 and before (<) 7.1.39
cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 320 » Version: N/A
Snom » Snom 360 Firmware
Versions from including (>=) 6.5 and before (<) 6.5.20
cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 360 » Version: N/A
Snom » Snom 360 Firmware
Versions from including (>=) 7.1 and before (<) 7.1.39
cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 360 » Version: N/A
Snom » Snom 360 Firmware
Versions from including (>=) 7.3 and before (<) 7.3.14
cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 360 » Version: N/A
Snom » Snom 370 Firmware
Versions from including (>=) 6.5 and before (<) 6.5.20
cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 370 » Version: N/A
Snom » Snom 370 Firmware
Versions from including (>=) 7.1 and before (<) 7.1.39
cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 370 » Version: N/A
Snom » Snom 370 Firmware
Versions from including (>=) 7.3 and before (<) 7.3.14
cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 370 » Version: N/A
Snom » Snom 820 Firmware
Versions from including (>=) 7.1 and before (<) 7.1.39
cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 820 » Version: N/A
Snom » Snom 820 Firmware
Versions from including (>=) 6.5 and before (<) 6.5.20
cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 820 » Version: N/A
Snom » Snom 820 Firmware
Versions from including (>=) 7.3 and before (<) 7.3.14
cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Snom » Snom 820 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2009-1048

EPSS FAQ

0.62%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1048

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST	2024-02-13
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2009-1048

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: nvd@nist.gov (Primary)
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-1048

http://www.securityfocus.com/archive/1/505723/100/0/threaded

Broken Link;Third Party Advisory;VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/52424

Multiple Snom VoIP Phones HTTP Host headers security bypass CVE-2009-1048 Vulnerability Report
Third Party Advisory;VDB Entry
http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt

404 - Compass Security
Broken Link
http://secunia.com/advisories/36293

About Secunia Research | Flexera
Broken Link;Vendor Advisory

Jump to

Vulnerability Details : CVE-2009-1048

Products affected by CVE-2009-1048

Exploit prediction scoring system (EPSS) score for CVE-2009-1048

CVSS scores for CVE-2009-1048

CWE ids for CVE-2009-1048

References for CVE-2009-1048