« Volver al listado

CVE-2007-5791

Estado: ModificadaAlta (10)—

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vonage — Motorola Phone Adapter Vt2142-vd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5791",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-11-01T16:46:00.000",
  "references": [
    {
      "url": "http://osvdb.org/38524",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/38525",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/27380",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26129",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=357",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=360",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37416",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37420",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/38524",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/38525",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/27380",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26129",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=357",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=360",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37416",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37420",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content."
    },
    {
      "lang": "es",
      "value": "El adaptador telefónico Vonage Motorola VT 2142-VD no verifica adecuadamente que un mensaje SIP INVITE fue originado desde un servidor legítimo, lo cual permite a atacantes remotos enviar mensajes INVITE falsificados, como ha sido demostrado mediante una inundación de mensajes que provoca una denegación de servicio,  y mediante llamadas telefónicas con contenido malicioso."
    }
  ],
  "lastModified": "2026-06-16T22:46:49.873",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:vonage:motorola_phone_adapter_vt2142-vd:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B86DDD2-05B1-4F2B-B998-5CADA903F3BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}