Description
A total of sixteen (16) hardcoded accounts and passwords have been identified which affect the MG1000S, Signaling Server and Call Server on the Communications Server 1000. The accounts and passwords provide a variety of access including potentially write access to the system.
Recommendations
This issue requires a patch from Nortel to completely address. In the short term it is recommended that a VoIP aware IPS product, such as VoIPguard, with signatures to detect unatuthorized attempts to access system resources using the hardcoded accounts be implemented to prevent them from being exploited. In addition, implementation of general best practice guidance such as controlling access to telephony networks via VLAN’s, access control lists, firewalls, network admission controls and/or other security devices will aid in limiting the exposure of this vulnerability. Nortel customers with a valid support agreement may wish to speak with their support contact in order to obtain additional vendor details.