CVE-2005-3717

CVE-2005-3717 describes a critical vulnerability in the telnet daemon of the UTStarcom F1000 VOIP WIFI Phone s2.0, which runs on VxWorks 5.5.1. The device ships with a hardcoded default username "target" and password "password," allowing unauthenticated remote attackers to gain full system access. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.