PT-2007-4626 · Aastra · Aastra 9112I Sip Phone

Publicado 2007-06-22 · Atualizado 2017-07-29 · CVE-2007-3349

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10

Description The issue allows remote attackers to cause a denial of service, either by freezing the device or triggering a continuous ring, via malformed SIP messages of specific lengths.

Recommendations For Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10, consider restricting the reception of SIP messages from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3349

Produtos afetados

Aastra 9112I Sip Phone

Referências · 7

• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=277& · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35060 · Nota
• http://vupen.com/english/advisories/2007/2318 · Nota
• http://securityfocus.com/bid/24537 · Correção
• http://secunia.com/advisories/25806 · Nota
• http://osvdb.org/37496 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3349 · Nota de Segurança