CVE-2007-4498: High severity Grandstream SIP Phone vulnerability

Published Aug 23, 2007

Updated

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service (blocked call reception) via a certain SIP INVITE message followed by a certain "SIP/2.0 183 Session Progress" message.

Affected Software

3 affected components

Grandstream SIP Phone=gxv-3000-1.0.0.18_boot

Grandstream SIP Phone=gxv-3000-1.0.1.7_firmware

Grandstream SIP Phone=gxv-3000-1.0.0.6_loader

Event History

Aug 23, 2007

CVE Published

07:17 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4498?

CVE-2007-4498 is rated as a high severity vulnerability due to its ability to allow remote attackers to exploit the device.

How do I fix CVE-2007-4498?

To mitigate CVE-2007-4498, you should upgrade to the latest firmware version from Grandstream that addresses this vulnerability.

What type of attacks can CVE-2007-4498 facilitate?

CVE-2007-4498 can facilitate silent call completion, eavesdropping, and denial of service on the Grandstream GXV-3000 phone.

Which devices are affected by CVE-2007-4498?

CVE-2007-4498 affects the Grandstream SIP Phone GXV-3000 with specific firmware, loader, and boot versions.

Can CVE-2007-4498 lead to data breaches?

Yes, CVE-2007-4498 may lead to data breaches as it allows unauthorized eavesdropping on conversations.