Zenitel ICX-AlphaCom Database Query Vulnerability Allowing Credential Exposure

A vulnerability exists in the Zenitel ICX-AlphaCom system that allows attackers to directly query the underlying database of the Billing Admin component. This could lead to the retrieval of all data stored in the Billing Admin database, including user credentials, as passwords are stored in plaintext. The vulnerability is present in ICX-AlphaCom versions 1.4.3.0 through 1.4.3.3.

Impact

Exploitation of this vulnerability could result in unauthorized access to user credentials, including plaintext passwords, stored in the Billing Admin database.

Remediation

Users can upgrade to ICX-AlphaCom version 1.4.3.3, which includes security fixes and re-enables the billing web component. Instructions for upgrading ICX-500/510 systems are available on the Zenitel Wiki.