CVE-2008-4444

2009-01-1621:30:03

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.056

Percentile

93.3%

JSON

Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers.

Affected configurations

Nvd

Node

ciscounified_ip_phone_7940g

ciscounified_ip_phone_7960g

VendorProductVersionCPE
ciscounified_ip_phone_7940g*cpe:2.3:h:cisco:unified_ip_phone_7940g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7960g*cpe:2.3:h:cisco:unified_ip_phone_7960g:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_ip_phone_7940g	*	cpe:2.3:h:cisco:unified_ip_phone_7940g::::::::
cisco	unified_ip_phone_7960g	*	cpe:2.3:h:cisco:unified_ip_phone_7960g::::::::