Cisco » Session Initiation Protocol (sip) Firmware : Security Vulnerabilities, CVEs,
Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.
Max CVSS
9.3
EPSS Score
0.52%
Published
2008-02-15
Updated
2017-08-08
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.
Max CVSS
10.0
EPSS Score
10.43%
Published
2008-02-15
Updated
2017-08-08
Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.
Max CVSS
10.0
EPSS Score
7.87%
Published
2008-02-15
Updated
2017-08-08
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.
Max CVSS
10.0
EPSS Score
10.43%
Published
2008-02-15
Updated
2017-08-08
The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.
Max CVSS
7.8
EPSS Score
0.95%
Published
2008-02-15
Updated
2017-08-08
Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.
Max CVSS
7.8
EPSS Score
2.13%
Published
2008-02-15
Updated
2017-08-08
6 vulnerabilities found