CVE-2007-3320
First published: Thu Jun 21 2007(Updated: )
The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avaya 4602SW IP Phone | <=r2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.sipera.com/index.php?action=resources,threat_advisory&tid=300&
- http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
- http://www.securityfocus.com/bid/24544
- http://secunia.com/advisories/25747
- http://osvdb.org/38116
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34971
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300&
Frequently Asked Questions
What is the severity of CVE-2007-3320?
CVE-2007-3320 is categorized with a medium severity level due to its potential for remote exploitation.
How do I fix CVE-2007-3320?
To mitigate CVE-2007-3320, upgrade the Avaya 4602SW IP Phone to a firmware version that is above 2.2.2.
Who is affected by CVE-2007-3320?
CVE-2007-3320 affects users of the Avaya 4602SW IP Phone with SIP firmware version 2.2.2 and earlier.
What kind of attacks can CVE-2007-3320 enable?
CVE-2007-3320 enables remote attackers to send SIP INVITE requests from any IP address, potentially causing various impacts.
Is CVE-2007-3320 still a concern for current devices?
CVE-2007-3320 is primarily a concern for devices that have not been updated to secure firmware versions.
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/avaya
- canonical/avaya 4602sw ip phone
- version/avaya 4602sw ip phone/r2.2