{"id":"CVE-2007-0528","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-0528","generatedAt":"2026-10-27T19:37:44.269Z","title":"The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote…","description":"The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).","published":"2007-01-26T01:28:00.000Z","lastModified":"2026-06-16T22:35:45.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":9,"severity":"HIGH","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C"},"cwe":[],"affected":["centrality communications/pa168 chipset"],"epss":{"score":0.0452,"percentile":0.91469,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2007-01-24","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":3189,"kind":"exploit","title":"PA168 Chipset IP Phones - Weak Session Management","url":"https://www.exploit-db.com/exploits/3189","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/3189.sh","file":"exploits/hardware/remote/3189.sh","published":"2007-01-24","added":"2007-01-23","updated":null,"author":"Adrian _pagvac_ Pastor","type":"remote","platform":"hardware","port":null,"verified":true,"codes":["OSVDB-32966","CVE-2007-0528"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 4.5%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://osvdb.org/32966","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23936","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulner_PR0614.php","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/457868/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/0346","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/3189","source":"cve@mitre.org"},{"url":"http://osvdb.org/32966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulner_PR0614.php","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/457868/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/3189","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0528","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}