Man-in-the-Middle Vulnerability in Avaya 4602SW IP Phone
CVE-2007-3319

Currently unrated

Key Information:

Vendor: Avaya
Status: 4602sw Ip Phone
Vendor: CVE Published:; 21 June 2007

What is CVE-2007-3319?

The Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware versions 2.2.2 and earlier is vulnerable to man-in-the-middle attacks due to the lack of use of the cnonce parameter in the Authorization header during MD5 digest authentication. This oversight enables remote attackers to intercept or hijack communications, putting users at risk. Proper mitigations should be applied to secure affected devices and protect against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch