Unscored severity · published Jun 21, 2007
CVE-2007-3320
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
4I
4602sw IP Phone · Avaya
through r2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3320
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3320
osvdb.org
http://osvdb.org/38116
Vendor Advisory
http://secunia.com/advisories/25747
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
www.securityfocus.com
http://www.securityfocus.com/bid/24544
www.sipera.com
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300&
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34971
More from 4602sw IP Phone
–
CVE-2007-3319
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest…
–
CVE-2007-3321
The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service (device reboot) via a flood of packets to the…
–
CVE-2007-3322
The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of…