CVE-2007-0528 json
The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided b…
published 2007-01-26 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0526
- cvss
- 9.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.5%
- EPSS 4.5% chance of exploitation in 30 days, percentile 91%
- public exploits
- 1
- Exploit-DB
Summary
The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).
Timeline
- First public exploit (EDB-3189)
- Published
Exploit prediction
4.52% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-3189 PA168 Chipset IP Phones - Weak Session Management remote, 2007-01-24
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
References
-
exploit-db.com
/exploits/3189
exploit
-
procheckup.com
/Vulner_PR0614.php
vendor-advisory
-
secunia.com
/advisories/23936
third-party-advisory
-
vupen.com
/english/advisories/2007/0346
vdb-entry
-
securityfocus.com
/archive/1/457868/100/0/threaded
mailing-list
-
secunia.com
/advisories/23919
third-party-advisory
-
osvdb.org
/32966
vdb-entry
Sources
- CVE List CVE-2007-0528
- NVD CVE-2007-0528
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.