Temporary Subscriber Password Stored in Plaintext in Slican IPx

Executive Summary

The vulnerability in the WebCTI service for Slican IPx telephone exchanges involves storing temporary subscriber passwords in plaintext within the database. An attacker with access to this database can retrieve the plaintext password and use it to log in to the subscriber's account without authorization.

Useful 0 Not Useful 0

Detection Guidance

Check the WebCTI service database for plaintext storage of temporary subscriber passwords. Inspect logs for unauthorized access attempts to the database or WebCTI interface. Verify if the IPx series version is below 6.62.0100.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to gain unauthorized access to a subscriber's account, potentially leading to misuse of phone services, exposure of call history, contact lists, voicemails, and other sensitive data. It could also enable further attacks if the compromised account has administrative privileges.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates data protection regulations such as GDPR and HIPAA by exposing plaintext passwords and sensitive subscriber data. It could result in unauthorized access to personal information, leading to legal penalties, reputational damage, and loss of compliance certifications.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade the IPx series to version 6.62.0100 or later. Ensure temporary passwords are not stored in plaintext. Restrict database access to authorized personnel only. Monitor for suspicious login attempts to the WebCTI interface.

Useful 0 Not Useful 0