Denial of Service Vulnerability in Avaya 4602 SW IP Phone
CVE-2007-3322

Currently unrated

Key Information:

Vendor
Avaya
Vendor
CVE Published:
21 June 2007

Summary

The Avaya 4602 SW IP Phone, specifically the 4602D02A model with SIP firmware versions 2.2.2 and earlier, exhibits a significant vulnerability where a constant media port number is utilized for calls. This flaw can be exploited by remote attackers who flood the RTP port with packets, resulting in noticeable audio quality degradation and service disruption for users. Mitigation measures should be implemented to safeguard the integrity of communications.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.