CVE		CVE-2007-2512
Status		Candidate
Description		Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems.
Severity		High
CVSS score		7
CVSS vector		(AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N)
Phase		Assigned (07.05.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2512
References		BID : 24360
		BUGTRAQ : 20070607 RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0
		MISC : http://cert.uni-stuttgart.de/advisories/al-ip-touc...
		XF : alcatellucent-voip-unauthorized-access(34760)
SecurityVulns:		Alcatel-Lucent OmniPCX 7.0 VLAN information leak