Vulnerability in N/a
CVE-2007-4459
Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; o…
EPSS: 0.743 (98.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 25378 (vdb-entry, x_refsource_BID)
- cisco-ipphone-sip-dos(36125) (vdb-entry, x_refsource_XF)
- 20070821 Multiple SIP Vulnerabilities in the Cisco 7960 IP Phones (x_refsource_CISCO, vendor-advisory)
- 26547 (x_refsource_SECUNIA, third-party-advisory)
- 20070820 10 messages SIP Remote DOS on Cisco 7940 SIP Phone (mailing-list, x_refsource_FULLDISC)
- 3042 (x_refsource_SREASON, third-party-advisory)
- 20070820 3 messsages attack remote DOS on Cisco 7940 (mailing-list, x_refsource_FULLDISC)
- 1018591 (vdb-entry, x_refsource_SECTRACK)
- ADV-2007-2928 (vdb-entry, x_refsource_VUPEN)
- 36695 (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2007-4459?
- CVE-2007-4459 is a vulnerability in N/a. Published 2007-08-21.
- Is CVE-2007-4459 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.