Vulnerability in Snom 320 Sip Phone

CVE-2007-3439

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800.

EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.

Affected products

Snom 320_sip_phone — versions jffs23.36, sip_6.2.3
Snom Snom_320_linux — versions 3.25
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)