« Volver al listado

CVE-2007-4459

Estado: ModificadaAlta (7.1)—

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Voip Phone Cp-7940Cisco — Voip Phone Cp-7960

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4459",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-21T21:17:00.000",
  "references": [
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/26547",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3042",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1018591",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20070821-sip.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/36695",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25378",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2928",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36125",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/26547",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3042",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1018591",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20070821-sip.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/36695",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25378",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2928",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36125",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages."
    },
    {
      "lang": "es",
      "value": "Cisco IP Phone 7940 y 7960 con versión de firmware P0S3-08-6-00, y otro SIP versiones de firmware anteriores a 8.7(0), permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) por medio de (1) una cierta secuencia de 10 mensajes SIP INVITE y OPTIONS no válidos; o (2) un determinado mensaje SIP INVITE no válido que contiene una etiqueta remota, seguido por un cierto ajuste de dos mensajes SIP OPTIONS relacionados."
    }
  ],
  "lastModified": "2026-06-16T22:44:08.293",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7940:*:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C89D38E-D97C-4725-B290-062FBEAA42CE",
              "versionEndIncluding": "8.70"
            },
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CD97749-4AD8-4B93-9E32-3379898211A1"
            },
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB9FED25-C504-4539-8511-01915C26FF51"
            },
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F335BCD-C25E-46BB-8B35-AC31FB87899A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7940:8.6:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC32D6D4-DB30-4074-9751-EAF7731C5277"
            },
            {
              "criteria": "cpe:2.3:h:cisco:voip_phone_cp-7960:*:p0s3-08-6-00_firmware:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF6743CA-2B76-4DD1-A864-B66C0E982BB2",
              "versionEndIncluding": "8.70"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}