Horizon Alert
Summary of the vulnerability and why it matters
This advisory concerns a critical vulnerability in Slican telephone exchanges, allowing unauthenticated remote access to sensitive system controls. An attacker can exploit this by making a specific phone call, bypassing authentication and gaining full administrative privileges over the system's configuration and protocols. This issue is particularly concerning for older, end-of-life systems that will not receive updates, potentially requiring hardware replacement for mitigation.
- Unauthenticated remote system control is possible.
- End-of-life systems are permanently vulnerable.
- Assess and upgrade legacy telephone exchanges.
Attack Path
How an attacker could exploit the issue
An attacker can target Slican telephone exchanges by initiating a connection with a specific caller ID. This allows them to bypass authentication and gain full access to the control panel and service protocols, even if remote access is normally disabled. This can lead to unauthorized management of the system.
- Unauthenticated remote access required.
- Specific caller ID triggers vulnerability.
- Full system control is at risk.
Live Threat
Current exploitation, exposure, and threat context
An unauthenticated attacker could gain full control over Slican telephone exchanges by connecting via a modem with a specific caller ID, even temporarily enabling remote access if disabled. This bypasses authentication, exposing the service protocol and configuration panel for remote management.
- Telephone exchange control panel.
- Remote connection via caller ID.
- Full administrative access gained.
Operational Fix
Recommended remediation, mitigation, and detection steps
Real-world ownership of this vulnerability likely falls to teams managing the Slican telephone exchange systems, potentially including IT infrastructure, telecommunications, or specialized network operations teams. The initial practical step is to inventory all deployed Slican systems, determine their network reachability and business criticality, and identify the accountable owner for each. This will inform a risk-based remediation plan, prioritizing systems that are accessible and essential.
- Identify telecommunication system owners.
- Verify remote access and network exposure.
- Contact vendor for hardware upgrade options.
