CVE-2007-3320
Summary
| CVE | CVE-2007-3320 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-06-21 18:30:00 UTC |
| Updated | 2023-11-07 02:00:00 UTC |
| Description | The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Avaya | 4602sw Ip Phone | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Sipera.com | MISC | www.sipera.com | Vendor Advisory |
| 38116 | OSVDB | osvdb.org | |
| ASA-2007-263 (VIPER-2007-046, VIPER-2007-047, VIPER-2007-048, VIPER-2007-049) | CONFIRM | support.avaya.com | Vendor Advisory |
| Sipera.com | www.sipera.com | ||
| Avaya 4602SW IP Phone Security Bypass Vulnerability | BID | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Avaya 4602SW SIP Phone Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.