Vulnerability Database

296,202

Total vulnerabilities in the database

CVE-2007-4459

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.

  • Published: Aug 21, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-4459
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:M/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
cisco / voip_phone_cp-7940 3.0-p0s3-08-6-00_firmware 3.0-p0s3-08-6-00_firmware.x
cisco / voip_phone_cp-7940 3.1-p0s3-08-6-00_firmware 3.1-p0s3-08-6-00_firmware.x
cisco / voip_phone_cp-7940 8.6-p0s3-08-6-00_firmware 8.6-p0s3-08-6-00_firmware.x
cisco / voip_phone_cp-7960 - 8.70.x
cisco / voip_phone_cp-7940 3.2-p0s3-08-6-00_firmware 3.2-p0s3-08-6-00_firmware.x
cisco / voip_phone_cp-7940 - 8.70.x