Lucene search
HistoryJun 22, 2007 - 6:30 p.m.
CVE-2007-3349
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
High
EPSS
0.021
Percentile
89.4%
The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (device freeze) via a malformed SIP message of a certain length or (2) cause a denial of service (continuous ring) via a malformed SIP message of a certain other length.
Affected configurations
Node
aastra_telecom9112i_sip_phoneMatch1.4.0.10481.1.0.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aastra_telecom | 9112i_sip_phone | 1.4.0.1048 | cpe:2.3:h:aastra_telecom:9112i_sip_phone:1.4.0.1048:1.1.0.10:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-3349
2007-06-22 18:00:00
CVE-2007-3441
2007-06-27 00:00:00
cve
cve
CVE-2007-3349
2007-06-22 18:30:00
CVE-2007-3441
2007-06-27 00:30:00
prion
prion
Code injection
2007-06-22 18:30:00
Format string
2007-06-27 00:30:00
nvd
nvd
CVE-2007-3441
2007-06-27 00:30:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
High
EPSS
0.021
Percentile
89.4%
Related for NVD:CVE-2007-3349