First published: Tue May 06 2008(Updated: )
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linksys SPA2102 | =3.3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2008-2092 has been disputed but refers to a potential denial of service issue via a long ping packet.
CVE-2008-2092 allows remote attackers to crash the Linksys SPA-2102 Phone Adapter using a long ping packet, commonly known as a 'ping of death'.
CVE-2008-2092 specifically affects version 3.3.6 of the Linksys SPA-2102 Phone Adapter.
The attack vector for CVE-2008-2092 is remote exploitation through sending crafted long ping packets to the device.
As of now, there is no specific patch mentioned for CVE-2008-2092, but updating the device firmware may mitigate the issue.