CVE-2007-3347

Currently unrated

Key Information:

Vendor
D-link
Status
Dph-541
Dph-540
Vendor
CVE Published:
22 June 2007

Summary

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.

References

http://www.sipera.com/index.php?action=resources%2Cthreat...
x_refsource_MISC
http://www.vupen.com/english/advisories/2007/2320
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/25803
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.