Avaya P330 4.0 Password hard-coded credentials

Summaryinfo

A vulnerability labeled as problematic has been found in Avaya P330 4.0. The impacted element is an unknown function. Such manipulation of the argument Password with the input root leads to hard-coded credentials. In addition, an exploit is available. Adding more authentication is recommended.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Avaya P330 4.0. Affected by this issue is an unknown part. The manipulation of the argument Password with the input value root leads to a hard-coded credentials vulnerability. Using CWE to declare the problem leads to CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Impacted is confidentiality, integrity, and availability.

The weakness was presented 01/13/2014 by Darius Freamon as Avaya P330 Stackable Switch Default root Account as confirmed advisory (Website). The advisory is shared for download at dariusfreamon.wordpress.com. The exploitation is known to be difficult. The attack needs to be approached locally. No form of authentication is required for exploitation. Technical details as well as a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1110.001.

A public exploit has been developed by Darius Freamon and been published immediately after the advisory. The exploit is available at dariusfreamon.wordpress.com. It is declared as functional. The advisory illustrates:

The P330 device is supplied with a console cable and a RJ-45-to-DB-9 adaptor. (1) Use these items to connect the serial (COM) port on your PC/terminal to the Avaya P330 console port. (2) Ensure that the serial port settings on the terminal are 9600 baud, 8 bits, 1 stop bit and no parity. (3) When you are prompted for a Login Name, enter the default login. The default login is root. (4) When you are promoted for a password, enter the user level password root.

It is possible to mitigate the problem by adding an authentication mechanism.

The vulnerability is also documented in the vulnerability database at OSVDB (102282†). downloads.avaya.com is providing further details. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Avaya

Name

• P330

Version

• 4.0

License

• commercial

Website

• Vendor: https://www.avaya.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion