NetSight
IP …
high7.1Public exploit code

CVE-2007-4459

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reb…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.

Affected products

VendorProductAffected versions
CiscoVoip Phone Cp-7940
through 8.70
Versions 3.0, 3.1, 3.2, 8.6
CiscoVoip Phone Cp-7960
through 8.70

Weakness classification

CWE-20

References