CVE-2006-0360: MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and poss...

Security readout for executives and security teams

An old MPM SIP HP-180W wireless IP phone firmware WE.00.17 reportedly exposes an undocumented UDP service on port 9090 without authentication. Remote attackers may obtain sensitive information and possibly disrupt the phone. The bundle provides no CVSS score, no confirmed patch, and no evidence of active exploitation, so urgency depends on whether these phones are still present or reachable. Exposure is likely limited to legacy MPM HP-180W phones, especially devices on flat voice networks or reachable from untrusted networks. The provided affected-product metadata is incomplete, so confirm by asset inventory rather than assuming broader VoIP impact. Treat this as a legacy exposure cleanup item unless affected phones are reachable from untrusted networks. If present in production voice environments, prioritize isolation or replacement because the service is undocumented, unauthenticated, and may disclose information or disrupt availability. Mitigation focus: Inventory for MPM SIP HP-180W phones running firmware WE.00.17.; Block UDP/9090 from untrusted networks and across unnecessary internal segments.; Place legacy VoIP devices on restricted voice VLANs with tight ACLs..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.